Technical Product Security Engineer

Audit Data Search, Inc.; New York (NY); On-site; USD 130,000 - 160,000; Full time

Job summary

A Fortune-level consumer technology company is seeking a Principal Technical Product Security Engineer to secure complex client applications. This hybrid position involves leading architecture reviews, embedding security in the software development lifecycle, and mentoring junior team members. Candidates should have over 10 years in application security and expertise in securing thick client applications. This role provides significant ownership and the chance to shape security practices within a technical organization.

Qualifications

• 10+ years of experience in product or application security.
• Demonstrated ownership at the system or product level.

Responsibilities

• Lead secure architecture reviews and threat modeling.
• Partner with engineers on design decisions and secure implementation.
• Guide product developers in crafting secure products.
• Drive security for desktop and mobile applications across OS environments.
• Advise on OS-level security controls.
• Embed security into the SDLC through tooling and education.
• Support vulnerability remediation and incident response.
• Influence security strategy across a high-impact product area.
• Coach and mentor junior team members.

Skills

Securing thick client/native applications

Understanding of OS security models

GenAI security and modern cryptography

Secure coding practices in systems and application languages

Static/dynamic analysis tools

Embedding security into the SDLC

Incident response and vulnerability remediation

Cross-team communication skills

Writing clear developer-facing security guidelines

Providing actionable remediation guidance

Education

Bachelor's Degree in a related field

Job description

Principal Technical Product Security Engineer - NYC (Hybrid)

*Please apply ONLY if you meet the requirements listed in this job posting.*

About the Company

Our client, a Fortune-level consumer technology company is seeking a Principal Product Security Engineer to partner deeply with engineering and drive secure-by-design practices for complex, thick client applications at scale. This role offers long-term ownership, early architectural influence, and the opportunity to shape how secure products are built within a highly technical security organization.

About the Role

This is a hands‑on senior level role for someone with demonstrated experience securing desktop and/or mobile software, not just reviewing web applications. You’ll work early in the SDLC to influence architecture, implementation, and long-term security strategy with minimal friction to developers.

Responsibilities

• Lead secure architecture reviews and threat modeling for complex client-side applications
• Partner directly with engineers on design decisions, code reviews, and remediation, including guidance on secure implementation
• Guide product developers in crafting products to be robust against misuse and abuse - with the lowest friction possible.
• Drive security for desktop and mobile applications across modern OS environments (Windows, macOS, Linux, iOS, Android)
• Advise on OS-level security controls, including sandboxing, privilege separation, IPC, and secure local storage
• Embed security into the SDLC through tooling, secure patterns, and developer education
• Support vulnerability remediation and incident response in thick client environments
• Influence security strategy across a high-impact product area
• Oversee, coach and mentor more junior members of the team

Qualifications

• 10+ years of experience in product or application security, with demonstrated ownership at the system or product level
• Bachelor's Degree in a related field

Required Skills

• Deep, hands‑on experience securing thick client / native applications (desktop and/or mobile)
• Strong understanding of OS security models, including sandboxing, IPC, local storage protections, and secure use of platform APIs
• Proficiency in GenAI security, modern cryptography, certificate management, secure authentication (OAuth, WebAuthn, FIDO2), and secure session handling
• Hands‑on experience with secure coding practices in at least one systems language (C++, Rust, Go) and one application language (Kotlin, Swift, C#).
• Familiarity with static/dynamic analysis tools, fuzzing, penetration testing, and reverse engineering for client applications
• Experience embedding security into the SDLC (threat modeling, code reviews, secure design patterns)
• Ability to manage incident response and vulnerability remediation for thick client environments.
• Strong cross‑team communication skills and ability to write clear developer‑facing security guidelines.
• Ability to work directly with engineers and provide practical, actionable remediation guidance and clearly communicate ideas and solutions.

Preferred Skills

• Experience securing large-scale consumer products
• Background in systems‑level or client‑side security research

Location

Hybrid role based in NYC. Open to applicants outside of NY if willing to relocate at own expense (No relocation assistance provided).