Product Security Engineer: Elevate Secure Software & APIs

MARS Veterinary; Loveland (CO); On-site; USD 130,000 - 162,000; Full time

Benefits offered by this job

Paid Time Off

Medical, Dental, Vision

401(k) with company match

Tuition/Continuing Education Reimb.

Life Insurance

Disability Insurance

Pet Care Discounts

Job summary

Antech is seeking a Product Security Engineer to embed secure coding practices across the development lifecycle. You will collaborate with Software Engineering and Cybersecurity to define and enforce standards, implement secure SDLC, and drive vulnerability remediation within development teams.

Responsibilities include secure code reviews, threat modeling, and guiding DevOps on security in CI/CD pipelines. Strong knowledge of OWASP, CWE, and cloud security is required for this role.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, IT, CS, Engineering or related field.
• 5+ years in secure software development, application security or DevSecOps.
• Hands-on experience with SAST/DAST/SCA tools and secure coding standards.

Responsibilities

• Define, implement and enforce secure coding practices across product teams.
• Lead secure SDLC initiatives and align with NIST, OWASP, CWE, CERT standards.
• Perform secure code reviews (manual and automated) and remediation.
• Triage vulnerabilities with developers and DevOps for fixes in code.
• Guide on threat modeling and risk assessment for product development.
• Support CI/CD security testing tools and pipelines (SAST/DAST/SCA).
• Advise on encryption, PKI, authentication, and patch management.
• Stay current on emerging threats and security best practices.

Skills

Secure coding standards

SAST/DAST/SCA

C# / .NET

TypeScript

Azure security

DevSecOps

Threat modeling

Cloud security

Burp Suite

OWASP

PKI

Education

Bachelor's/Master's in CS/IT

Tools

SonarQube

Checkmarx

Fortify

Veracode

Burp Suite

Job description

Antech is seeking a Product Security Engineer to embed secure coding practices across the development lifecycle. You will collaborate with Software Engineering and Cybersecurity to define and enforce standards, implement secure SDLC, and drive vulnerability remediation within development teams.

Responsibilities include secure code reviews, threat modeling, and guiding DevOps on security in CI/CD pipelines. Strong knowledge of OWASP, CWE, and cloud security is required for this role.