Remote Product Security Engineer: Secure by Design

SailPoint; United States; Remote; USD 145,000 - 245,000; Full time

Benefits offered by this job

Health and wellness coverage

Disability coverage

Life insurance

401(k) with company matching

Flexible vacation policy

Job summary

SailPoint is seeking a Product Security Engineer to advance secure software development across our products. You will partner with Engineering to identify risks, drive remediation, and embed security throughout the SDLC, including leveraging AI tools and securing CI/CD pipelines.

The role emphasizes threat modeling, secure architecture design, vulnerability management, and collaboration with Security Operations. Remote within the continental US offered.

Qualifications

• 4-5 years of experience in product security, application security, software engineering, or a related field.
• Experience with security testing tools such as SAST, SCA, DAST, container security scanners.
• Experience with CI/CD security controls and DevSecOps practices.
• Familiarity with programming languages such as Python, Go, Java, JavaScript/TypeScript, Ruby.
• Demonstrated ability to use AI-powered tools to enhance security productivity, research, analysis, and remediation.

Responsibilities

• Partner with Engineering teams to identify and mitigate security risks throughout the SDLC.
• Support threat modeling activities and help implement security controls
• Define and promote secure coding standards, policies, and secure-by-design principles
• Participate in AI initiatives across the Cyber organization and SSDLC
• Coordinate internal and external application and penetration testing initiatives
• Validate vulnerability findings and prioritize remediation by risk
• Perform root cause analysis and recommend long-term improvements
• Collaborate with Security Operations on monitoring and detection capabilities
• Triage and oversee remediation for bug bounty disclosures
• Develop security training, guidance, and technical documentation
• Interact with other SailPoint organizations as a security consultant

Skills

Product security

Threat modeling

Secure architecture

Vulnerability management

AI/ML security

Cross-team influence

Tools

SAST

SCA

DAST

Container scanners

CI/CD security

DevSecOps

Python

Go

Java

JavaScript/TypeScript

Ruby

Job description

SailPoint is seeking a Product Security Engineer to advance secure software development across our products. You will partner with Engineering to identify risks, drive remediation, and embed security throughout the SDLC, including leveraging AI tools and securing CI/CD pipelines.

The role emphasizes threat modeling, secure architecture design, vulnerability management, and collaboration with Security Operations. Remote within the continental US offered.