Product Security Engineer - Secure Code & DevSecOps

Antech Diagnostics; Loveland (CO); On-site; USD 130,000 - 162,000; Full time

Benefits offered by this job

PTO & Holidays

Medical, Dental, Vision plans

Company paid life insurance

Short and long-term disability

FSA/HSA options

Job summary

Antech Diagnostics in Loveland, Colorado is seeking a Product Security Engineer to define, implement, and enforce secure coding practices across the software lifecycle. You will collaborate with software engineering and cybersecurity teams to embed security into design, development, and deployment.

The role focuses on secure coding standards, SAST/DAST/SCA, and guiding developers on threat mitigation, encryption, and patch management.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering or related field.
• 5+ years of experience in secure software development, application security or DevSecOps.
• Hand-on experience static, dynamic and Software Composition Analysis (SAST/DAST/SCA) tools.
• Strong knowledge of secure coding standards (e.g. OWASP, CERT, CWE, SANS Top 25, etc.)
• Proficiency in programming languages and related tools such as C#, .NET, PowerShell, TypeScript, as well as Azure-related security best-practices for Azure DevOps, Azure Security Center, Key Vault, Azure Policy, Azure AD and role-based access controls.
• Experience with security testing tools like SonarQube, Checkmarx, Fortify, Veracode, Burp Suite, or similar tools.
• Understanding of Zero Trust, Cloud-based and hybrid architectures.
• Strong-analytical and problem-solving skills with the ability to work in a fast-paced agile environment.

Responsibilities

• Assist in the implementation and maintenance of secure coding standards based on industry best practices such as NIST 800-53, OWASP, CWE, CERT, and ISO.
• Apply and promote coding standards based on language-specific secure coding guidelines for languages such as JavaScript, .NET, TypeScript, and mobile OS-based languages, as well as Cloud-related security best practices.
• Participate in the design, development, and maintenance of secure services and APIs using modern frameworks, ensuring secure coding practices are met from the start.
• Support the integration of security principles into the Software Development Lifecycle, ensuring compliance with established security and privacy policies and standards.
• Conduct secure code reviews (manual and automated) and analysis (SAST, DAST, SCA) to identify and actively fix/remediate vulnerabilities directly in the codebase.
• Work closely with software developers and DevOps teams to triage vulnerabilities, implement code-level fixes, and enhance secure coding practices.
• Provide technical guidance and support to developers on secure coding techniques and threat mitigation strategies.
• Support the execution, maintenance, and monitoring of automated security testing tools within CI/CD pipelines.
• Participate in risk assessments and threat modeling exercises to provide vulnerability remediation guidance to product development teams.
• Ensure application features and integrations align with industry standards for security, including encryption, disaster recovery, authentication, and patch management.
• Stay up to date on emerging security threats, vulnerabilities, and mitigation techniques to continually improve code quality.

Skills

Secure coding

Vulnerability management

Collaboration

Analytical thinking

Communication

Education

Bachelor’s or Master’s in Cybersecurity/IT/CS

Tools

OWASP

SAST/DAST/SCA tools

SonarQube

Checkmarx

Fortify

Veracode

Burp Suite

Azure DevOps

Azure Security Center

Key Vault

Kubernetes

PKI concepts

Job description

Antech Diagnostics in Loveland, Colorado is seeking a Product Security Engineer to define, implement, and enforce secure coding practices across the software lifecycle. You will collaborate with software engineering and cybersecurity teams to embed security into design, development, and deployment.

The role focuses on secure coding standards, SAST/DAST/SCA, and guiding developers on threat mitigation, encryption, and patch management.