Product Security Engineer: Secure SDLC & Code Reviews

Mars Petcare; Loveland (CO); On-site; USD 130,000 - 162,000; Full time

Benefits offered by this job

Paid Time Off

Medical, Dental, Vision

401(k) match

Tuition Reimbursement

Pet Care Discounts

Job summary

Antech Diagnostics, Inc. is seeking a Product Security Engineer to define, implement and enforce secure coding practices across the software development lifecycle.

This role collaborates with Software Engineering and Cybersecurity teams to design and implement secure coding standards, determine language-specific guidelines, and apply secure SDLC methodologies. The candidate will conduct secure code reviews, triage vulnerabilities with development teams, and provide guidance on threat mitigation.

Qualifications

• Bachelor’s or Master’s degree in a related field such as Cybersecurity, IT, CS or Engineering.
• 5+ years of experience in secure software development, application security or DevSecOps.
• Experience with SAST/DAST/SCA tools and secure coding practices.
• Strong knowledge of OWASP, CERT, CWE, SANS Top 25 security guidelines.
• Proficiency in C#, .NET, PowerShell, TypeScript and Azure security practices.
• Familiarity with Azure DevOps, Azure Security Center, Key Vault, and RBAC.

Responsibilities

• Define, implement and enforce secure coding practices across the development lifecycle.
• Lead secure SDLC design and collaborate with software and cybersecurity teams.
• Conduct secure code reviews (manual and automated) and remediate vulnerabilities.
• Triage vulnerabilities with Dev and DevOps to implement fixes in code.
• Provide guidance on secure coding techniques and threat mitigation.
• Support automated security testing tools within CI/CD pipelines.
• Participate in risk assessments and threat modeling for product teams.

Skills

5+ years experience

SAST/DAST/SCA

OWASP / CERT / CWE / SANS 25

C#.NET

PowerShell

TypeScript

Azure DevOps

Azure Security Center

Security testing tools

Education

Bachelor’s or Master’s degree in Cybersecurity/IT/CS/Engineering

Tools

Docker

Kubernetes

Job description

Antech Diagnostics, Inc. is seeking a Product Security Engineer to define, implement and enforce secure coding practices across the software development lifecycle.

This role collaborates with Software Engineering and Cybersecurity teams to design and implement secure coding standards, determine language-specific guidelines, and apply secure SDLC methodologies. The candidate will conduct secure code reviews, triage vulnerabilities with development teams, and provide guidance on threat mitigation.