Principal Product Security Engineer - Desktop & Mobile

Audit Data Search, Inc.; New York (NY); On-site; USD 130,000 - 160,000; Full time

Job summary

A Fortune-level consumer technology company is seeking a Principal Technical Product Security Engineer to secure complex client applications. This hybrid position involves leading architecture reviews, embedding security in the software development lifecycle, and mentoring junior team members. Candidates should have over 10 years in application security and expertise in securing thick client applications. This role provides significant ownership and the chance to shape security practices within a technical organization.

Qualifications

• 10+ years of experience in product or application security.
• Demonstrated ownership at the system or product level.

Responsibilities

• Lead secure architecture reviews and threat modeling.
• Partner with engineers on design decisions and secure implementation.
• Guide product developers in crafting secure products.
• Drive security for desktop and mobile applications across OS environments.
• Advise on OS-level security controls.
• Embed security into the SDLC through tooling and education.
• Support vulnerability remediation and incident response.
• Influence security strategy across a high-impact product area.
• Coach and mentor junior team members.

Skills

Securing thick client/native applications

Understanding of OS security models

GenAI security and modern cryptography

Secure coding practices in systems and application languages

Static/dynamic analysis tools

Embedding security into the SDLC

Incident response and vulnerability remediation

Cross-team communication skills

Writing clear developer-facing security guidelines

Providing actionable remediation guidance

Education

Bachelor's Degree in a related field

Job description

A Fortune-level consumer technology company is seeking a Principal Technical Product Security Engineer to secure complex client applications. This hybrid position involves leading architecture reviews, embedding security in the software development lifecycle, and mentoring junior team members. Candidates should have over 10 years in application security and expertise in securing thick client applications. This role provides significant ownership and the chance to shape security practices within a technical organization.