Product Security Engineer: Threat Modeling & Auto-Patcher

Noblesoft Technologies Inc.; California (MO); Hybrid; USD 150,000 - 230,000; Full time

Job summary

Noblesoft Technologies Inc. seeks a Product Security Engineer in the Bay Area (Hybrid) to drive threat modeling, vulnerability triage, and PoC validation. You will bridge automated security tooling with product code owners, ensuring timely remediation and robust security practices.

The role requires hands-on coding in at least two languages, strong review QA skills, and collaboration with software engineers to validate patches and drive fixes to closure.

Qualifications

• Threat modeling and vulnerability management required for AppSec.
• Familiarity with CWE/CVE/OWASP Top 10 and remediation SLAs.
• Experience building PoCs and PoC harnesses for verification.

Responsibilities

• Threat modeling, asset profiling, and mapping data flows for high-priority services.
• Triage vulnerabilities, classify, and manage policy-compliant remediation queues.
• Build minimal test environments and reproduce findings for viable vulnerabilities.
• Oversee QA of automated remediation patches and verify fix efficacy with tests.
• Coordinate with product teams to route patches and verify end-to-end deployment.

Skills

Threat modeling

Vulnerability triage

PoC development

Code review QA

SAST/DAST tooling

CI/CD tooling

AI-assisted debugging

Multi-language coding

Tools

Static analysis tools

Git-based review

CI pipelines

Job description

Noblesoft Technologies Inc. seeks a Product Security Engineer in the Bay Area (Hybrid) to drive threat modeling, vulnerability triage, and PoC validation. You will bridge automated security tooling with product code owners, ensuring timely remediation and robust security practices.

The role requires hands-on coding in at least two languages, strong review QA skills, and collaboration with software engineers to validate patches and drive fixes to closure.