Product Security Engineer: Break & Build Secure Software

Darwin Recruitment; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

We are seeking a Product Security Engineer for a small, highly technical cybersecurity company. You will combine an offensive-security mindset with genuine software engineering ability, review and audit code, identify vulnerabilities, assess architectures, and remediate issues with engineering teams.

You will operate across product security, application security, offensive security and software engineering, helping ensure new security technologies move from research and prototyping into

Qualifications

• Offensive-security mindset paired with strong software engineering ability.
• Not a traditional penetration-testing role; emphasis on remediation and secure design.

Responsibilities

• Perform security assessments and penetration testing across software products and supporting infrastructure.
• Conduct secure code reviews to identify vulnerabilities and weaknesses.
• Review software architecture from an offensive-security perspective.
• Identify attack surfaces, vulnerabilities and weaknesses before products reach customers.
• Work with software engineers to understand, reproduce and remediate security issues.
• Write code to validate vulnerabilities and build proof-of-concept exploits where appropriate.
• Develop internal security tooling and automate repetitive security testing.
• Conduct threat modelling throughout the software development lifecycle.
• Assess security-sensitive implementations and ensure proper engineering practices.
• Collaborate with research and engineering teams to evaluate new security concepts and technologies.
• Translate technical research into practical product security requirements.
• Contribute to secure development standards and processes as the organization grows.
• Support the wider security architecture and technical direction of new products.

Skills

Offensive security mindset

Software engineering

Code review

Job description

We are seeking a Product Security Engineer for a small, highly technical cybersecurity company. You will combine an offensive-security mindset with genuine software engineering ability, review and audit code, identify vulnerabilities, assess architectures, and remediate issues with engineering teams.

You will operate across product security, application security, offensive security and software engineering, helping ensure new security technologies move from research and prototyping into