Remote Product Security Engineer - Own Security for SaaS

Action1 Corporation; United Kingdom; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Fully remote work environment

Opportunity to work on a real security product

Close collaboration with teams

Supportive team emphasizing learning

Job summary

Action1 Corporation is looking for a Product Security Engineer to secure their multi-tenant SaaS product. The candidate will work with engineering and security teams to identify risks and improve security practices while ensuring product security is practical and actionable.

This role requires a strong background in software engineering and cybersecurity, with responsibilities that include reviewing code, providing remediation guidance, and conducting security assessments.

The position offers a fully remote work environment and a chance to have a direct impact on product security practices.

Qualifications

• 3+ years of experience in product security, application security, or DevSecOps.
• Strong software engineering background.
• Familiarity with threat modeling and security design reviews.

Responsibilities

• Support PSIRT and vulnerability handling activities.
• Review code, APIs, and architecture to identify security issues.
• Conduct threat modeling and security design reviews.

Skills

Product security

Application security

DevSecOps

Software engineering

Cloud security

Vulnerability management

Incident response

Threat modeling

Communication skills

Tools

AWS

C++

JavaScript

Job description

Action1 Corporation is looking for a Product Security Engineer to secure their multi-tenant SaaS product. The candidate will work with engineering and security teams to identify risks and improve security practices while ensuring product security is practical and actionable.

This role requires a strong background in software engineering and cybersecurity, with responsibilities that include reviewing code, providing remediation guidance, and conducting security assessments.

The position offers a fully remote work environment and a chance to have a direct impact on product security practices.