Product Security Engineer: Secure SDLC Architect

Nominal; Texas; On-site; USD 208,000 - 245,000; Full time

Benefits offered by this job

Health and dental insurance

Unlimited vacation

Parental leave 12 weeks

Hardware stipend

Lunch provided

Wellness stipend

401(k)

Job summary

Nominal is seeking a Product Security Engineer to embed security into the hardware-driven software platform. You will review designs, implement gates (SAST, SCA, secrets scanning, DAST) in pipelines, and own remediation from CVEs to pentest findings.

This is a high-ownership role for engineers moving into security, shaping secure design from day one. You’ll work across teams to set standards, drive secure SDLC practices, and mentor engineers on security requirements for customer-facing features.

Qualifications

• Strong software engineering background with production services experience.
• Experience performing threat modeling and security design reviews for distributed systems or cloud services.
• Experience operating application security tooling in CI/CD pipelines (SAST, SCA, secrets scanning, DAST).
• Experience running vulnerability management processes with triage and remediation tracking.
• Experience scoping penetration tests and closing findings with engineers.
• Track record of writing security standards or requirements adopted by teams.
• Ability to lead cross-team work and influence engineers without direct authority.

Responsibilities

• Lead threat modeling and security design reviews for new services and features.
• Architect and own SAST, SCA, and secrets-scanning gates in CI/CD pipelines.
• Own our DAST program from tool selection to remediation triage.
• Run product vulnerability management with CVE remediation and SLAs.
• Define secure SDLC standards and provide guidance and tooling to developers.
• Coordinate penetration tests and drive remediation to closure.
• Define security requirements for customer-facing features and mentor engineers.

Skills

Threat modeling

Security design

CI/CD tooling

SAST

DAST

SCA

Vulnerability mgmt

Cross-team collaboration

Tools

SAST tools

SCA tools

Secrets scanning

DAST tooling

Kubernetes security

Job description

Nominal is seeking a Product Security Engineer to embed security into the hardware-driven software platform. You will review designs, implement gates (SAST, SCA, secrets scanning, DAST) in pipelines, and own remediation from CVEs to pentest findings.

This is a high-ownership role for engineers moving into security, shaping secure design from day one. You’ll work across teams to set standards, drive secure SDLC practices, and mentor engineers on security requirements for customer-facing features.