Product Security Engineer

Stellar IT Solutions LLC; Sunnyvale (CA); On-site; USD 140,000 - 200,000; Full time

Job summary

Stellar IT Solutions LLC in Sunnyvale, CA is seeking a Product Security Engineer to embed security into the product design and lifecycle. You will work with cross-functional engineering teams to secure our application platform.

The role covers threat modeling, AI-assisted testing, vulnerability management, and educating developers on secure coding. Experience with Kubernetes, cloud platforms, SAST/DAST, and CI/CD security is essential.

Qualifications

• 5+ years of experience as a Security Engineer or similar in a large software organization.
• Proficiency in Python and TypeScript; strong security tooling knowledge.
• Experience deploying SAST/DAST and integrating security into CI/CD pipelines.
• Experience with Kubernetes and cloud security across AWS/GCP/Azure.
• Ability to mentor developers on secure coding and threat modeling.

Responsibilities

• Analyze applications and architectures from design to release for vulnerabilities.
• Conduct security assessments and AI-assisted testing to identify and mitigate issues.
• Drive vulnerability management and remediation with development teams.
• Educate developers on secure coding and emerging threats.
• Collaborate with incident response and provide remediation guidance.
• Mature automated SAST/DAST tooling and CI/CD security.

Skills

Python

TypeScript

SAST/DAST

CI/CD security

Kubernetes

Cloud security

AI-assisted testing

Tools

Burp Suite

OWASP ZAP

Job description

We are seeking a multifaceted Product Security Engineer whose role will be to embed security directly into the product design and development lifecycle. Working closely with cross-functional engineering teams, you will play a crucial role in securing our application platform.

Roles:

• Analyze applications and system architectures from their inception to release. Proactively identify potential security vulnerabilities and integrate robust security controls and conduct architecture reviews and threat modeling.
• Conduct regular security assessments and utilize AI-assisted testing on products and systems to systematically identify and mitigate vulnerabilities before they can be exploited.
• Assist in maturing vulnerability management program and drive risk-contextualized resolutions discovered through various security platforms, collaborating closely with development teams.
• Provide continuous guidance and education to developers on secure coding practices, emerging threats, and general security best practices to cultivate a security-conscious culture.
• Collaborate with incident response teams and join security incident calls that impact product operations and create targeted remediation suggestions based on current threat landscapes.
• Work alongside software engineers to mature automated SAST and DAST tooling to secure development frameworks and CI/CD pipelines.

We're looking for someone who has:

• 5+ years of demonstrable experience as a Security Engineer, Application Security Engineer, or Product Security Engineer within a highly complex, rapidly scaling software organization.
• Proficiency in modern programming languages (such as Python, Typescript, etc.), knowledge of security tools (e.g., Burp Suite, OWASP ZAP), and familiarity with modern security protocols and encryption methods.
• Implemented AI to rapidly identify, validate, and scale security programs.
• Deep, practical knowledge of container security (Kubernetes), compute constraints, and securing ephemeral workloads across major public cloud platforms (AWS, GCP, Azure) and on-premises environments.
• Hands-on experience deploying, tuning, and automating SAST, DAST, and CI/CD pipeline security tools.
• Specific operational experience configuring and driving remediation through cloud security platforms.
• Proven experience securing large-scale platform migrations and managing the distinct security lifecycles of both legacy systems and modern microservices.

Nice to have:

• Direct professional experience in the autonomous vehicle, automotive, aerospace, or defense sectors.
• Familiarity with physics-based simulation environments, deterministic computing constraints, or managing High-Performance Computing (HPC) clusters.
• Demonstrable contributions to open-source security tools, published vulnerability research, or recognized vulnerability disclosures (CVEs)

Skills :

SAST,AWS,SECURITY,PYTHON,TypeScript,Kubernetes,Vulnerability Management