Product Security Engineer

Cloud Destinations LLC; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Cloud Destinations LLC is seeking a Product Security Engineer to embed security into the product lifecycle in a fully remote capacity. You will collaborate with engineering, product, and security teams to strengthen protections across multiple software products.

The ideal candidate leads threat modeling and security design reviews, defines reference architectures, and drives secure development practices and vulnerability management at scale, with hands-on expertise in modern security tooling and

Qualifications

• 4+ years of experience in product security, application security, software architecture, or a related security engineering discipline.
• Demonstrated experience leading threat modeling, secure architecture reviews, and risk assessments for complex software products or platforms.
• Hands-on knowledge of secure software development, vulnerability management, and security testing approaches including SAST, DAST, SCA, and related tooling.
• Bachelor's degree in computer science, computer engineering, cybersecurity, or equivalent; advanced degree preferred.

Responsibilities

• Lead security reviews for software products and platforms, providing design guidance that aligns business objectives, scalability, and security requirements.
• Define and maintain product security reference architectures, design patterns, and engineering standards across the software development lifecycle.
• Partner with engineering and product leaders to perform threat modeling, architecture risk assessments, and security design reviews for new and existing offerings.
• Drive adoption and effective use of secure development practices and security tooling, including SAST, DAST, SCA, secrets detection, and CI/CD security controls.
• Establish risk-based approaches for vulnerability triage, remediation planning, exception handling, and security verification across multiple product teams.

Skills

Threat modeling

Secure architectures

Risk assessment

Secure development

Security tooling

Java

C#

C

C++

Education

Bachelor's degree in CS/CE/Cybersecurity

Advanced degree preferred

Tools

SAST

DAST

SCA

Secrets detection

CI/CD security

Job description

Position: Product Security Engineer

Location: Remote

Hiring Mode: 12+ Months Contract

Job Description:

Our Product Security organization partners with engineering teams across the company to embed security into the full product lifecycle from concept and architecture through development, release, and sustainment. We are seeking a highly experienced Product Security engineer to actively contribute to improving the security posture in client s software products.

The ideal candidate brings deep experience partnering with software engineering, platform, and product leadership teams to drive security outcomes at scale. This role is expected to define reference architectures, lead threat modeling and security design reviews, establish product security standards, guide risk-based decisions, and influence the adoption of secure development practices, vulnerability management, and security verification across a diverse portfolio of products and technologies.

Job Responsibilities

• Lead security reviews for software products and platforms, providing design guidance that aligns business objectives, scalability, and security requirements
• Define and maintain product security reference architectures, design patterns, and engineering standards across the software development lifecycle
• Partner with engineering and product leaders to perform threat modeling, architecture risk assessments, and security design reviews for new and existing offerings
• Drive adoption and effective use of secure development practices and security tooling, including SAST, DAST, SCA, secrets detection, and CI/CD security controls
• Establish risk-based approaches for vulnerability triage, remediation planning, exception handling, and security verification across multiple product teams
• Research, evaluate, and introduce security technologies and automation that improve developer experience and scale product security operations
• Provide technical leadership and mentorship to engineers and security practitioners, influencing security strategy, roadmap priorities, and long-term architectural direction
• Stay current on emerging threats, vulnerabilities, regulatory expectations, and industry best practices, translating them into actionable guidance for product teams

Qualifications

• 4+ years of experience in product security, application security, software architecture, or a related security engineering discipline
• Demonstrated experience leading threat modeling, secure architecture reviews, and risk assessments for complex software products or platforms
• Strong hands-on knowledge of secure software development, vulnerability management, and security testing approaches including SAST, DAST, SCA, and related tooling
• Solid software engineering or architecture background with experience in languages such as Java, C#, C, C++, or similar technology stacks
• Bachelor s degree in computer science, computer engineering, cybersecurity, or equivalent practical experience; advanced degree preferred
• Deep understanding of secure design principles, authentication and authorization models, cryptography fundamentals, cloud and platform security, and common application attack patterns
• Experience influencing cross-functional teams, driving standards adoption, and communicating security tradeoffs to technical and business stakeholders
• Knowledge of the EU Cyber Resilience Act (CRA) and related product security regulatory requirements, with the ability to translate compliance expectations into practical security architecture and engineering guidance
• Maintains current knowledge of security technologies and industry trends, and applies that knowledge to evaluate, recommend, and implement scalable security solutions