Senior Product Security Lead: Threat Modeling & Response

Francisco Partners; Canada; On-site; CAD 117,000 - 150,000; Full time

Job summary

Black Duck Software, Inc. in Canada seeks a Lead Product Security to drive applied product security across its portfolio. You will lead portions of complex security projects, partner with the Director of Security Operations, and mentor junior engineers while delivering architecture reviews, threat models, and vulnerability triage.

You will also maintain detection content, contribute to SOAR automations, and track projects through Jira with clear milestones and updates.

Qualifications

• 7–8+ years in product security or security engineering with hands-on depth in at least two areas listed.
• Hands-on with SCA, SAST, DAST, and secret scanning tooling.
• Familiarity with AWS, Azure, or GCP from a security perspective.
• Awareness of AI and LLM security risks and OWASP Top 10 for LLM Apps.

Responsibilities

• Partner with engineering teams on architecture reviews and threat models.
• Contribute to secure SDLC, vulnerability management, and incident response.
• Triage vulnerabilities and drive resolution with engineering teams.
• Draft responses to customer security questionnaires and audits.
• Maintain detection content and contribute to SOAR automations and runbooks.

Skills

Security engineering

Threat modeling

Incident response

Communication

Education

Bachelor's in Computer Science / Information Security

Tools

SCA tools

SAST tools

DAST tools

Secret scanning (GitGuardian)

Job description

Black Duck Software, Inc. in Canada seeks a Lead Product Security to drive applied product security across its portfolio. You will lead portions of complex security projects, partner with the Director of Security Operations, and mentor junior engineers while delivering architecture reviews, threat models, and vulnerability triage.

You will also maintain detection content, contribute to SOAR automations, and track projects through Jira with clear milestones and updates.