Product Security Engineer (Remote)

Hire Feed; España; On-site; PHP 6,897,000 - 10,658,000; Full time

Job summary

Hire Feed is seeking a Product Security Engineer for a remote, full-time role to design and implement security controls for a cloud-native platform and integrate security into the product lifecycle.

You will collaborate with cross-functional teams on threat modeling, secure coding practices, and secure architectures for cloud environments.

This role offers exposure to cutting-edge security challenges in a high-growth tech setting and requires hands-on experience with SDLC security and IAM.

Qualifications

• Experience with secure SDLC practices and security requirements engineering.
• Proficiency in threat modeling methodologies and risk assessments.
• Knowledge of cloud security principles for AWS, Azure, or GCP.
• Familiarity with security testing tools (SAST/DAST) and pen-testing basics.
• Experience with container security (Docker/Kubernetes).
• Strong understanding of IAM and zero-trust concepts.
• Ability to write clear security documentation for engineering teams.

Responsibilities

• Develop and maintain security requirements for product features and infrastructure components.
• Conduct threat modeling and risk assessments for new and existing features.
• Implement and enforce secure coding practices and security testing methodologies.
• Collaborate with engineering teams to design and deploy secure cloud architectures.
• Monitor and respond to security vulnerabilities, coordinating remediation efforts.

Skills

Secure SDLC

Threat modeling

Cloud security

Security testing

Container security

IAM & Zero Trust

Security documentation

Tools

SAST tools

DAST tools

Docker

Kubernetes

IAM tooling

Job description

• Role: Product Security Engineer (Remote)
• Location: Remote (Work from Anywhere)

Role Overview:

We are hiring for one of our clients, seeking a Product Security Engineer to work on a full-time basis. This role involves designing and implementing security controls for a cloud-native platform, with a focus on threat modeling and secure development practices. The position requires collaboration with cross-functional teams to integrate security into the product lifecycle.

Key Responsibilities:

• Develop and maintain security requirements for product features and infrastructure components.
• Conduct threat modeling and risk assessments for new and existing product features.
• Implement and enforce secure coding practices and security testing methodologies.
• Collaborate with engineering teams to design and deploy secure architectures for cloud platforms.
• Monitor and respond to security vulnerabilities, coordinating remediation efforts across teams.

Required Skills & Qualifications:

• Experience with secure software development lifecycle (SDLC) practices.
• Proficiency in threat modeling methodologies and tools.
• Knowledge of cloud security principles and best practices for AWS, Azure, or GCP.
• Familiarity with security testing tools such as SAST, DAST, and penetration testing.
• Experience with container security, including Docker and Kubernetes.
• Strong understanding of identity and access management (IAM) and zero-trust principles.
• Ability to write clear security documentation and guidelines for engineering teams.

More About the Opportunity:

This role offers a unique opportunity to work with a global leader in the Software Development | Technology, Information and Internet | IT Services and IT Consulting industry, contributing to the secure delivery of AI-powered solutions. The position provides exposure to cutting-edge security challenges in a high-growth tech environment.

Equal Opportunity Employer:

We hire based on skills and expertise. All qualified candidates are welcome regardless of background, experience, or prior employment history. Applications are reviewed solely on demonstrated technical ability and qualifications.