Product Security Engineer

Absorb Software; Canada; Remote; CAD 80,000 - 100,000; Full time

Job summary

Join a forward-thinking company as a Product Security Engineer, where you'll play a crucial role in safeguarding software products. This dynamic position involves promoting secure development practices, conducting threat modeling, and managing vulnerabilities to ensure compliance with industry standards. You'll collaborate with various teams to implement security measures and respond to incidents effectively. If you're passionate about security and eager to make a significant impact in a remote-first environment, this opportunity is perfect for you. Embrace the chance to empower learners and fuel business productivity while working with a team that values diversity and continuous growth.

Qualifications

• Proven experience in secure software development and secure coding practices.
• Strong knowledge of threat modeling and risk assessment techniques.

Responsibilities

• Implement secure development practices and guide teams on coding standards.
• Conduct threat modeling and perform risk assessments to mitigate risks.

Skills

Secure Software Development

Threat Modeling

Vulnerability Management

Incident Response

Risk Assessment

Secure Coding Practices

Analytical Skills

Problem-Solving Skills

Communication Skills

Teamwork Abilities

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Information Security

Relevant Certifications (CISSP, CEH, OSCP)

Tools

SAST Tools

DAST Tools

Web Application Firewall (WAF)

Job description

About the role:
We are seeking a highly skilled and motivated Product Security Engineer to join our dynamic team. The ideal candidate will have a strong background in secure software development, threat modeling, vulnerability management, and incident response. As a Product Security Engineer, you will ensure our products are secure, comply with industry standards, and meet client security expectations.

What you'll do:

• Promote Secure Development Practices
• Implement secure development practices in line with Microsoft Secure SDLC.
• Guide development teams on secure coding standards and best practices.
• Conduct threat modeling to identify security threats.
• Perform risk assessments to evaluate and mitigate risks.
• Hardening the software development process
• Review static and dynamic code analysis.
• Perform internal penetration testing and security audits.
• Manage automated security testing tools (SAST and DAST).
• Review cryptographic controls for industry standard alignment.
• Assist in identifying, analyzing, and prioritizing product vulnerabilities.
• Coordinate remediation efforts in a timely manner with relevant teams.
• Incident Response & Compliance Support
• Respond to and manage security incidents and breaches.
• Investigate root causes and implement preventive measures.
• Provide documentation and support for audits and compliance (e.g., SOC-2, GDPR).
• Assist with client security and compliance requests.
• Manage and monitor Web Application Firewall (WAF) changes.
• Report on vulnerabilities, security status, and incident response activities.

What you'll bring:

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Proven experience in secure software development.
• Strong knowledge of secure coding practices and standards.
• Experience with threat modeling and risk assessment.
• Proficiency in static and dynamic code analysis.
• Hands-on experience with security testing tools (SAST, DAST).
• Familiarity with cryptographic controls and industry standards.
• Excellent understanding of vulnerability management.
• Experience in incident response and root cause analysis.
• Knowledge of compliance standards (e.g., SOC-2, GDPR).
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.

Preferred Skills and Qualifications:

• Relevant certifications such as CISSP, CEH, OSCP, or similar.
• Knowledge of SOC-2, ISO-27001 and PCI.
• Experience in cloud security and with cloud providers (e.g., AWS, Azure, GCP).
• Experience managing Web Application Firewalls (WAF).

The Company:
Absorb Software is a remote-first company offering online training solutions to leading organizations globally. As a cloud-based learning management system (LMS), we're engineered to inspire learning and fuel business productivity. We're passionate about empowering learners to enrich their lives, workplaces, and communities.

Our Core Values:

• Achieving exceptional results by genuinely caring about each other and our work.
• United growth through a commitment to elevating continuous learning.

Absorb celebrates diversity and is committed to creating an inclusive environment for all members. All employment decisions are based on business needs, job requirements, and individual qualifications. Successful candidates will undergo pre-employment screening, including a criminal record check, and must show proof of legal eligibility to work in the applied country without sponsorship.

For any accommodations during the recruitment process, please indicate this on your application. We're dedicated to meeting your accessibility needs.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

E-learning