Product Security Engineer

Socket.dev; Boston (MA); Hybrid; USD 135,000 - 175,000; Full time

Job summary

KKR in Boston is seeking an experienced Product Security Professional. As a Security Analyst, you will design, implement, and maintain security measures across our environment, focusing on internally developed and externally facing applications.

You will troubleshoot vulnerabilities, manage security testing, and lead cross‑functional teams in secure coding practices, cloud security, and DevSecOps. You will work with IT and business units to ensure regulatory compliance and a proactive security

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience as an Application Security Engineer or similar role.
• Strong understanding of SDLC and secure coding practices.
• Proficiency in security assessments and penetration testing.
• Experience with security tools (firewalls, VPNs, IDS/IPS, NAC).
• Knowledge of regulatory requirements and cloud/DevSecOps best practices.
• Familiarity with OWASP Top Ten and security frameworks.

Responsibilities

• Conduct application security assessments and penetration tests.
• Collaborate with development teams to integrate secure coding practices.
• Design and implement security solutions to protect applications.
• Provide guidance on application security best practices.
• Maintain awareness of security trends and countermeasures.
• Participate in incident response for application security incidents.
• Deliver security training to development teams; promote secure coding.
• Develop and maintain security standards, policies, and procedures.
• Document findings and remediation activities.
• Integrate security tools into CI/CD pipelines.

Skills

Security assessments

Penetration testing

Cloud security

DevSecOps

Secure coding

SDLC

OWASP Top Ten

Regulatory knowledge

Team collaboration

Communication

Education

Bachelor's degree in Computer Science, Information Technology, or a related field

Tools

Firewalls

VPNs

IDS/IPS

NAC

Job description

COMPANY OVERVIEW

KKR is a leading global investment firm that offers alternative asset management as well as capital markets and insurance solutions. KKR aims to generate attractive investment returns by following a patient and disciplined investment approach, employing world‑class people, and supporting growth in its portfolio companies and communities. KKR sponsors investment funds that invest in private equity, credit and real assets and has strategic partners that manage hedge funds. KKR’s insurance subsidiaries offer retirement, life and reinsurance products under the management of Global Atlantic Financial Group. References to KKR’s investments may include the activities of its sponsored funds and insurance subsidiaries.

POSITION SUMMARY

KKR is seeking an experienced Product Security Professional. This role offers exciting opportunities for growth and impact as KKR scales its business and continues to innovate. As a Security Analyst, you will be responsible for designing, implementing, and maintaining security measures across our environment specific to our internally developed applications and external facing applications. You must be proficient in troubleshooting, vulnerability management, cloud security, application security, and have a deep understanding of a wide range of systems, and be capable of leading other teams in these efforts. You will work closely with IT and other business units to ensure our security posture remains strong, aligned with industry best practices, and compliant with regulatory requirements. You will also be looking over the horizon, identifying future needs and exploring leading edge solutions. This role will be based in our Boston office 4 days per week, with 1 day remote.

RESPONSIBILITIES

• Conduct application security assessments and penetration tests to identify vulnerabilities and security issues.
• Work closely with the software development team to ensure that secure coding practices are implemented throughout the application development lifecycle.
• Design and implement security solutions to protect applications from potential threats.
• Provide guidance and recommendations on application security best practices.
• Maintain knowledge of the latest security trends, threats, and countermeasures.
• Participate in incident response and handling activities related to application security incidents.
• Conduct security awareness and training sessions for the development team to promote secure coding practices.
• Develop and maintain application security standards, policies, and procedures.
• Report and document security findings and remediation activities.
• Integrate security tools and practices into the continuous integration/continuous delivery (CI/CD) pipeline.

QUALIFICATIONS

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience as an Application Security Engineer or similar role.
• Strong understanding of software development life cycle (SDLC) and secure coding practices.
• Proficiency in conducting security assessments and penetration tests.
• Experience with security tools and technologies such as firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control (NAC).
• Knowledge of regulatory requirements and industry best practices related to application security.
• Experience with cloud security and DevSecOps practices.
• Familiarity with OWASP Top Ten and other security frameworks
• Team‑player who enjoys working in a collaborative and collegial environment and is an active contributor as part of a global team
• Ability to work calmly under pressure and meet deadlines and solve problems requiring creativity, initiative and drive; self‑motivated and enjoys a sense of pride in their accomplishments
• Ability to present ideas in a user-friendly, business-friendly and technical language
• Strategic self‑starter with an innovative mindset and outstanding attention to detail

This is the expected annual base salary range for this Boston‑based position. Actual salaries may vary based on factors, such as skill, experience, and qualification for the role. Employees may be eligible for a discretionary bonus, based on factors such as individual and team performance.

Base Salary Range

$135,000 - $175,000 USD

KKR is an equal opportunity employer. Individuals seeking employment are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, sexual orientation, or any other category protected by applicable law.

KKR will provide reasonable accommodations as required by applicable federal, state, and/or local laws. Individuals seeking an accommodation for the application or interview process should email [e-mail]. Emails sent for unrelated issues, such as following up on an application, will not receive a response.

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access https://www.krr.com/careers because of your disability. You can request reasonable accommodations by sending an email to [e-mail]. Only emails left for this purpose will be returned.

Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. This notice applies only to applicants and employees who work or will work in Massachusetts, in accordance with applicable state law.