Product Security Engineer II — Secure SDLC & AI Security

Medallia; Buenos Aires; On-site; ARS 52,104,000 - 81,878,000; Full time

Job summary

Medallia is seeking a Product Security Engineer II to identify, assess, and remediate security risks across our products and engineering environments.

You will work closely with Product Security engineers and development teams to perform security reviews, investigate vulnerabilities, operate security tooling, support penetration testing activities, and integrate security controls throughout the software development lifecycle.

Qualifications

• 2-5 years of experience in application security, product security, penetration testing, security engineering, software engineering with a security focus, or related fields.
• Working knowledge of: OWASP Top 10, Web and API security, authentication/authorization concepts, common vulnerabilities, secure coding principles.
• Experience with one or more application security tools such as SAST, SCA, DAST, secrets detection, or vulnerability management platforms.
• Basic understanding of cloud and container technologies.
• Ability to analyze technical security findings and communicate remediation guidance to developers.
• Familiarity with scripting or programming languages such as Python, Java, JavaScript, Go, or similar.
• Ability to work independently on defined security tasks while collaborating effectively on complex investigations.
• Professional working proficiency in written and spoken English.

Responsibilities

• Perform security reviews of applications, APIs, features, and product changes.
• Identify common application security vulnerabilities and recommend remediation; participate in threat modeling and architecture reviews.
• Review designs and implementation details for security risks; partner with developers to remediate issues.

Skills

Application security

Penetration testing

Security engineering

Security tooling

Cloud security

Scripting languages

Tools

SAST

SCA

DAST

Secrets detection

Vulnerability management

Job description

Medallia is seeking a Product Security Engineer II to identify, assess, and remediate security risks across our products and engineering environments.

You will work closely with Product Security engineers and development teams to perform security reviews, investigate vulnerabilities, operate security tooling, support penetration testing activities, and integrate security controls throughout the software development lifecycle.