Remote Product Security Engineer: App Security & Pentesting

knowbe4; United States; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Company-wide bonuses tied to monthly销售

Employee referral bonuses

Adoption assistance

Tuition reimbursement

Certification reimbursement

Certification completion bonuses

Job summary

KnowBe4 is seeking a mid-level Product Security Engineer to strengthen application security across web, mobile, and traditional platforms. You will perform hands-on penetration testing, review source code, and work shoulder-to-shoulder with engineering teams as release velocity increases.

You will plan automated and manual security assessments, triage findings, and drive remediation to closure while embedding secure coding practices throughout the SDLC.

Qualifications

• Background in application security, penetration testing, or red teaming.
• Strong hands-on experience running automated tooling and manual tests against web, mobile, and traditional applications.
• Ability to read and reason about source code in Ruby, PHP, Go, JavaScript, or Python.
• Knowledge of OWASP Top 10 and CWE concepts.
• Strong written and spoken English for collaboration with international teams.

Responsibilities

• Plan and execute security assessments and penetration tests across web, mobile, and traditional apps.
• Read and analyze source code to surface vulnerabilities and propose fixes.
• Partner with engineers to triage findings and drive remediation to closure.
• Maintain threat models and build automations to streamline security testing.
• Embed secure coding practices across the software development lifecycle.

Skills

Application security

Penetration testing

Code review

OWASP Top 10

Ruby/PHP/Go/JS/Python

Tools

Burp Suite

SAST/DAST scanners

Dependency scanners

Job description

KnowBe4 is seeking a mid-level Product Security Engineer to strengthen application security across web, mobile, and traditional platforms. You will perform hands-on penetration testing, review source code, and work shoulder-to-shoulder with engineering teams as release velocity increases.

You will plan automated and manual security assessments, triage findings, and drive remediation to closure while embedding secure coding practices throughout the SDLC.