Product Security Engineer – Cloud & DevSecOps

Careers at KKR; United States; On-site; USD 135,000 - 175,000; Full time

Benefits offered by this job

Discretionary bonus

Job summary

KKR is seeking an experienced Product Security Professional to design, implement, and maintain security measures for internally developed and externally facing applications. The role focuses on vulnerability management, cloud security, and SDLC-aware security practices, with responsibilities spanning threat protection and compliance.

The position is based in the Boston area with a hybrid work structure and potential discretionary bonus.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Proven experience as an Application Security Engineer or similar role.
• Strong understanding of software development life cycle (SDLC) and secure coding practices.
• Proficiency in conducting security assessments and penetration tests.
• Experience with security tools and technologies such as firewalls, VPNs, IDS/IPS, and NAC.
• Knowledge of regulatory requirements and industry best practices related to application security.
• Experience with cloud security and DevSecOps practices.
• Familiarity with OWASP Top Ten and other security frameworks
• Team-player who enjoys working in a collaborative and collegial environment and is an active contributor as part of a global team
• Ability to work calmly under pressure and meet deadlines and solve problems requiring creativity, initiative and drive; self-motivated and enjoys a sense of pride in their accomplishments
• Ability to present ideas in a user-friendly, business-friendly and technical language
• Strategic self-starter with an innovative mindset and outstanding attention to detail

Responsibilities

• Conduct application security assessments and penetration tests to identify vulnerabilities and security issues.
• Work closely with the software development team to ensure that secure coding practices are implemented throughout the application development lifecycle.
• Design and implement security solutions to protect applications from potential threats.
• Provide guidance and recommendations on application security best practices.
• Maintain knowledge of the latest security trends, threats, and countermeasures.
• Participate in incident response and handling activities related to application security incidents.
• Conduct security awareness and training sessions for the development team to promote secure coding practices.
• Develop and maintain application security standards, policies, and procedures.
• Report and document security findings and remediation activities.
• Integrate security tools and practices into the continuous integration/continuous delivery (CI/CD) pipeline.

Job description

KKR is seeking an experienced Product Security Professional to design, implement, and maintain security measures for internally developed and externally facing applications. The role focuses on vulnerability management, cloud security, and SDLC-aware security practices, with responsibilities spanning threat protection and compliance.

The position is based in the Boston area with a hybrid work structure and potential discretionary bonus.