Remote Principal Product Security Engineer

Fifth Third Bank; Cincinnati (OH); Remote; USD 97,000 - 208,000; Full time

Job summary

Fifth Third Bank is seeking a Principal Product Security Engineer to drive security readiness across customer‑facing products. You will independently validate remediation, lead ProdSec360 initiatives, and advance secure-by-default patterns while shaping scalable engineering practices across the Product Security program.

In this role, you will partner with engineering, architecture, risk, and security teams to establish robust guardrails, threat models, and evidence‑based release guidance,

Qualifications

• Eight+ years of relevant experience across Product Security, Application Security, Security Engineering, Software Engineering, Cloud Security, Platform Engineering, or related disciplines.
• Hands‑on experience building, securing, testing, or operating production software or cloud platforms.
• Experience translating risk into practical engineering requirements, secure patterns, prioritization, and remediation guidance.
• Strong communication, collaboration, independent judgment, and ability to influence without direct authority.

Responsibilities

• Define practical security requirements and reusable, secure-by-default patterns for in‑scope customer‑facing software, APIs, SDKs, integrations, cloud deployments, and distributed services.
• Translate product risk into engineering controls, acceptance criteria, validation approaches, and durable remediation guidance.
• Own Product Security SOC2 readiness items from assessment through verified closure, driving stakeholder coordination, remediation commitments, dependencies, evidence collection, and follow‑through.
• Independently validate reported remediation through risk‑appropriate technical testing, such as code, configuration, application, API, cloud, infrastructure, or security‑control testing, confirming the underlying security condition is resolved before closure.
• Advance software supply chain practices, including dependency governance, software bills of materials, artifact integrity, provenance, and code signing.
• Define risk-based validation strategies using product exposure, architecture, customer impact, and material change.
• Evaluate findings in product context and provide clear remediation priorities, secure patterns, and evidence-based release guidance.
• Lead the design and build of ProdSec360, the authoritative product‑level view of security posture for in‑scope customer‑facing products, including its data model, scoring approach, architecture, ingestion patterns, user experience, and technical roadmap.
• Build ProdSec360 capabilities that integrate findings, threat models, penetration‑test status, SBOM completeness, remediation aging, secure‑pattern adoption, post‑release outcomes, assessment evidence, and customer‑assurance readiness into actionable product risk views.
• Use approved AI‑assisted development tools to accelerate design, implementation, and testing, and build agentic workflows and automations that reduce manual effort across ProdSec360 and Product Security processes.
• Provide senior technical judgment for high‑risk or emerging scenarios and mature Product Security standards and roadmap priorities.

Skills

Security engineering

Risk assessment

Communication

Independent judgement

Cross‑functional collaboration

AI governance

Education

Bachelor’s degree in a related field

Tools

Claude Code

GitHub Copilot

CI/CD tools

Cloud platforms

Job description

Fifth Third Bank is seeking a Principal Product Security Engineer to drive security readiness across customer‑facing products. You will independently validate remediation, lead ProdSec360 initiatives, and advance secure-by-default patterns while shaping scalable engineering practices across the Product Security program.

In this role, you will partner with engineering, architecture, risk, and security teams to establish robust guardrails, threat models, and evidence‑based release guidance,