Product Security Engineer (Loveland, CO)

MARS Veterinary

Loveland (CO)

Presencial

USD 130 000 - 162 000

Tempo integral

Há 4 dias

Torna-te num dos primeiros candidatos

Recebe uma resposta deste empregador

O teu currículo e carta de apresentação, adaptados exatamente ao que estão a contratar.

Ultrapassa os filtros ATS

Vantagens oferecidas por esta oferta de emprego

Paid Time Off

Medical, Dental, Vision

401(k) with company match

Tuition/Continuing Education Reimb.

Life Insurance

Disability Insurance

Pet Care Discounts

Resumo da oferta

Antech is seeking a Product Security Engineer to embed secure coding practices across the development lifecycle. You will collaborate with Software Engineering and Cybersecurity to define and enforce standards, implement secure SDLC, and drive vulnerability remediation within development teams.

Responsibilities include secure code reviews, threat modeling, and guiding DevOps on security in CI/CD pipelines. Strong knowledge of OWASP, CWE, and cloud security is required for this role.

Qualificações

Bachelor’s or Master’s degree in Cybersecurity, IT, CS, Engineering or related field.
5+ years in secure software development, application security or DevSecOps.
Hands-on experience with SAST/DAST/SCA tools and secure coding standards.

Responsabilidades

Define, implement and enforce secure coding practices across product teams.
Lead secure SDLC initiatives and align with NIST, OWASP, CWE, CERT standards.
Perform secure code reviews (manual and automated) and remediation.
Triage vulnerabilities with developers and DevOps for fixes in code.
Guide on threat modeling and risk assessment for product development.
Support CI/CD security testing tools and pipelines (SAST/DAST/SCA).
Advise on encryption, PKI, authentication, and patch management.
Stay current on emerging threats and security best practices.

Conhecimentos

Secure coding standards

SAST/DAST/SCA

C# / .NET

TypeScript

Azure security

DevSecOps

Threat modeling

Cloud security

Burp Suite

OWASP

PKI

Formação académica

Bachelor's/Master's in CS/IT

Ferramentas

SonarQube

Checkmarx

Fortify

Veracode

Burp Suite

Descrição da oferta de emprego

We understand that the world we want tomorrow starts with how we do business today, and that’s why we’re inspired to make A Better World for Pets. Antech is comprised of a diverse team of individuals who are committed to each other’s growth and development. Our culture is centered on our guiding philosophy, The Five Principles: Quality, Responsibility, Mutuality, Efficiency and Freedom. Today Antech is driving the future of pet health as part of Mars Science & Diagnostics, a family-owned company focused on veterinary care.

The Target Pay Range for this position is $130,000 - $162,000 annually.

Job Summary

The Product Security Engineer will be responsible for defining, implementing and enforcing secure coding practices to ensure that software security is embedded early on (shifting left) throughout product development lifecycle. To achieve this, the candidate will be collaborating with the Software Engineering Development Teams and the Cybersecurity team in leading and enhancing the design and implementation of information security requirements, including secure coding standards, language-specific secure coding guidelines, as well as secure SDLC methodologies. This role requires strong expertise in secure coding standards, vulnerability management, and collaboration with development teams to build secure applications.

Key Responsibilities

Assist in the implementation and maintenance of secure coding standards based on industry best practices such as NIST 800-53, OWASP, CWE, CERT, and ISO.
Apply and promote coding standards based on language-specific secure coding guidelines for languages such as JavaScript, .NET, TypeScript, and mobile OS-based languages, as well as Cloud-related security best practices.
Participate in the design, development, and maintenance of secure services and APIs using modern frameworks, ensuring secure coding practices are met from the start.
Support the integration of security principles into the Software Development Lifecycle, ensuring compliance with established security and privacy policies and standards.
Conduct secure code reviews (manual and automated) and analysis (SAST, DAST, SCA) to identify and actively fix/remediate vulnerabilities directly in the codebase.
Work closely with software developers and DevOps teams to triage vulnerabilities, implement code-level fixes, and enhance secure coding practices.
Provide technical guidance and support to developers on secure coding techniques and threat mitigation strategies.
Support the execution, maintenance, and monitoring of automated security testing tools within CI/CD pipelines.
Participate in risk assessments and threat modeling exercises to provide vulnerability remediation guidance to product development teams.
Ensure application features and integrations align with industry standards for security, including encryption, disaster recovery, authentication, and patch management.
Stay up to date on emerging security threats, vulnerabilities, and mitigation techniques to continually improve code quality.

Qualifications & Experience

Education, Experience & skills:

Bachelor’s or Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering or related field.
5+ years of experience in secure software development, application security or DevSecOps.
Hand‑on experience static, dynamic and Software Composition Analysis (SAST/DAST/SCA) tools.
Strong knowledge of secure coding standards (e.g. OWASP, CERT, CWE, SANS Top 25, etc.).
Proficiency in programming languages and related tools such as C#, .NET, PowerShell, TypeScript, as well as Azure-related security best‑practices for Azure DevOps, Azure Security Center, Key Vault, Azure Policy, Azure AD and role‑based access controls.
Experience with security testing tools like SonarQube, Checkmarx, Fortify, Veracode, Burp Suite, or similar tools.
Understanding of Zero Trust, Cloud‑based and hybrid architectures.
Strong‑analytical and problem‑solving skills with the ability to work in a fast‑paced agile environment.

Preferred Qualifications Experience in regulated industries (Healthcare, Petcare etc.) applying regulatory regulations and/or security frameworks under a quality management process.
Hands‑on knowledge of threat modeling methodologies (STRIDE, DREAD, etc.).
Experience in a laboratory setting, veterinary clinics, healthcare or related systems.
Experience communicating complex security concepts effectively (technical, non‑technical and executive level audiences).
Experience and knowledge working with encryption algorithms and a Public‑Key Infrastructure (PKI) solutions.
Knowledge of cloud security best practices for AWS, GCP and Azure.
Experience with container security (Docker, Kubernetes) a plus.
Relevant certifications such as CISSP, CSSLP, CEH, OSCP, GIAC GWAPT are highly preferred.
Microsoft Azure certifications including Microsoft Certified‑AZ‑500, AZ‑505, AZ‑400, SC‑900 are a plus.
Experience working in a regulated (FDA, MDR, Cyber Resiliency Act- CRA) environment with medical instrumentation is a plus.

Physical Demands

Extensive sitting, phone, and computer use
Extend and reach with hands and arms and use hands and fingers
Occasionally required to bend, kneel, stoop, or crouch
May be required to lift, move, and carry up to 15 lbs.
Specific vision abilities required including close vision, color vision, depth perception, and the ability to adjust focus.
Hearing ability to effectively communicate via the telephone and in person
Ability to communicate verbally on the telephone and in person
Fluency in the English language
Extended hours may be needed

Work Environment

The employee will primarily work in a typical office environment including use of cubicles, computers and overhead lighting. Temperature extremes will be minimal to nonexistent. The noise level in the work environment is usually moderate. The employee will be required to use a computer, spreadsheets, database management, email, and the Internet. The employee is frequently required to use a calculator; fax, copy machine, and phone system.

About Antech

Antech is a leader in veterinary diagnostics, driven by our passion for innovation that delivers better animal health outcomes. Our products and services span 90+ reference laboratories around the globe; in-house diagnostic laboratory instruments and consumables, including rapid assay diagnostic products and digital cytology services; local and cloud-based data services; practice information management software and related software and support; veterinary imaging and technology; veterinary professional education and training; and board-certified specialist support services.

Benefits

Benefits eligibility is based on employment status.