Remote Senior Product Security Engineer (Contract)

Gofractional; Northern (KY); Hybrid; USD 83,000 - 165,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

401K

Paid parental leave

Equity

Wellness Week

Career growth

Paid Family Leave

PTO 20 days

Job summary

Gofractional is seeking a Senior Product Security Engineer to identify security risks early, partner with development teams, and drive secure-by-design practices across the SDLC.

You will perform threat modeling, security testing, code reviews, and vulnerability management for web, API, AI-enabled services, and cloud-native apps, collaborating with cross-functional teams across Engineering, Cloud Security, Infrastructure, Compliance, and Product Management.

Qualifications

• 5+ years in Product Security or Application Security.
• Strong understanding of modern application architectures.
• Experience securing Web apps, APIs, microservices and cloud-native apps.
• Experience performing threat modeling.
• Experience conducting penetration testing.
• Solid knowledge of OWASP Top 10 and OAuth/OIDC.
• Experience with SAST, DAST, SCA and container security.
• Ability to work directly with engineering teams and communicate clearly.

Responsibilities

• Perform security design and architecture reviews for new products and features.
• Conduct threat modeling for applications, APIs, and AI-enabled services.
• Review application security posture throughout the SDLC.
• Partner with engineering teams to prioritize and remediate vulnerabilities.
• Review authentication, authorization, and access control implementations.
• Perform manual web, API, thick-client, and mobile app penetration testing.
• Validate findings from third-party penetration tests.
• Develop reusable security patterns and reference architectures.

Skills

Threat modeling

Penetration testing

Secure SDLC

Security testing

Cloud security

Software security

Cross-functional collaboration

Communication

Tools

Snyk

Burp Suite Pro

Semgrep

Wiz

GitHub Advanced Security

Job description

Gofractional is seeking a Senior Product Security Engineer to identify security risks early, partner with development teams, and drive secure-by-design practices across the SDLC.

You will perform threat modeling, security testing, code reviews, and vulnerability management for web, API, AI-enabled services, and cloud-native apps, collaborating with cross-functional teams across Engineering, Cloud Security, Infrastructure, Compliance, and Product Management.