Product Security Engineer

Jobgether; United States; Remote; USD 90,000 - 140,000; Full time

Benefits offered by this job

Remote work from home

Meaningful impact

Professional growth

Ownership and autonomy

Collaborative culture

Inclusive workplace

Job summary

Jobgether is seeking a security-minded professional to collaborate with engineering and product teams to review architecture, assess new features for security risks, and drive secure-by-default development across the stack.

You will lead security initiatives, automate security workflows, and promote continuous improvement by evaluating new tools and sharing insights with cross-functional partners.

Qualifications

• At least 3 years in product security, application security, or secure software development.

Responsibilities

• Collaborate with Engineering and Product to review architecture and prioritize improvements.

Skills

Programming languages (Python/Go/Java)

Threat modeling

Secure code reviews

Automation & scripting

Stakeholder communication

Education

Bachelor's degree in Engineering or Computer Science

Tools

SAST

DAST

SCA

Secrets scanning

Job description

Accountabilities

• Collaborate with Engineering and Product: Partner with engineering teams to review architecture, assess new features, identify security risks, and prioritize improvements without unnecessarily slowing development.
• Build Secure-by-Default Solutions: Develop and improve secure libraries, reusable components, and standardized development practices that prevent recurring vulnerabilities at scale.
• Strengthen Application Security: Configure, optimize, and maintain security tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secrets scanning, to improve detection and reduce false positives.
• Lead Security Projects: Manage cross-functional initiatives from initial scoping through implementation, influencing engineering and product roadmaps while communicating technical risks and recommendations to diverse stakeholders.
• Automate Security Operations: Develop scripts, tools, and automated workflows that expand security coverage, reduce repetitive tasks, and improve the efficiency of security processes.
• Support Continuous Improvement: Apply feedback and lessons learned to refine security practices, evaluate emerging tools, and promote measurable security outcomes.
• Champion Security Research: Participate in the organization's vulnerability discovery and bug bounty ecosystem, testing new approaches and sharing insights that can improve platform security and product capabilities.
• Promote Security Awareness: Help engineering teams adopt secure development practices and integrate security considerations into everyday technical decisions.

Requirements

• Professional Experience: At least 3 years of experience in product security, application security, or secure software development, with practical experience securing modern applications.
• Programming and Automation: Proficiency in at least one modern programming language, such as Python, Go, Ruby, or Java, with the ability to review code, automate tasks, and build security tools.
• Application Security Expertise: Hands-on experience with threat modeling, secure code reviews, and automated security testing, along with a strong understanding of common vulnerabilities, including the OWASP Top 10.
• Security Tooling: Familiarity with SAST, DAST, SCA, and secrets-scanning solutions, including the ability to improve their effectiveness and integrate them into development workflows.
• Project and Stakeholder Management: Demonstrated ability to lead initiatives, communicate security risks clearly, and influence cross-functional teams across Engineering, DevOps, and Product.
• Education: A bachelor's degree in Engineering, Computer Science, or a related discipline, or equivalent practical experience.
• Cloud Security (Preferred): Experience securing cloud-native environments and Infrastructure as Code, including technologies such as Terraform, AWS, GCP, Kubernetes, or Docker.
• Bug Bounty Experience (Preferred): Familiarity with bug bounty programs, vulnerability disclosure processes, or offensive security practices.
• Secure Development Enablement (Preferred): Experience building reusable security libraries, standardized workflows, or secure‑by‑default development solutions that eliminate entire categories of vulnerabilities.
• Adaptability and Communication: A proactive, analytical mindset, strong problem‑solving abilities, and the capacity to work effectively in a fast‑paced, collaborative, remote environment.
• Industry Experience (Preferred): Previous experience in a growing cybersecurity, technology, or SaaS organization is an advantage.

Benefits

• Remote Work: Work from home full‑time while collaborating with a distributed team.
• Meaningful Impact: Contribute to improving software security and helping organizations prevent real‑world cyber threats.
• Professional Growth: Gain opportunities to expand your application security expertise, experiment with new tools, and influence security engineering practices.
• Ownership and Autonomy: Lead projects from concept to implementation and contribute directly to technical and strategic decisions.
• Collaborative Culture: Work alongside colleagues with diverse backgrounds and perspectives in an environment that values teamwork, inclusion, and shared learning.
• Inclusive Workplace: Equal employment opportunities and reasonable accommodations throughout the recruitment process.
• Compensation: Salary details were not specified in the original job description and may be discussed during the recruitment process.
• Additional Conditions: Employment may be subject to background checks due to access to confidential and proprietary information.