Remote Senior Product Security Engineer — Secure Architecture

Priority Commerce; Oregon; Hybrid; USD 115,000 - 145,000; Full time

Benefits offered by this job

Bonus programs

401(k) match

Employee Stock Purchase Program (ESPP)

HSA and FSA options

Financial wellness resources

Job summary

Priority Commerce seeks a Senior Product Security Engineer to embed security across the SDLC. You will partner with Engineering, Product, Legal, and Compliance to identify risks and influence secure design.

The role demands deep expertise in application/product security and the ability to translate complex concepts into practical guidance. You will lead security reviews, threat modeling, and tooling adoption, maturing CI/CD security and regulatory compliance across PCI-DSS, SOC 2 Type II, and

Qualifications

• 5 years of experience in application security or related technical roles.
• Deep expertise in at least two security domains (web/API/mobile/cloud).
• Strong programming ability and security tooling experience.
• Familiarity with PCI-DSS, SOC 2 Type II, NIST CSF, ISO 27001.

Responsibilities

• Own security design reviews and threat modeling for high-risk product areas.
• Provide guidance on secure architecture, cryptography, and API security.
• Lead application security assessments, red team exercises, and simulations.
• Define security standards, secure coding guidelines, and tooling adoption.
• Mature CI/CD security posture across cloud and container environments.
• Translate risks into prioritized engineering recommendations.
• Support regulatory compliance posture and audits.

Skills

Application security

Threat modeling

Secure coding practices

Cloud security (AWS)

Programming: Python/Java/JavaScript

SAST/DAST/DAST tooling

Communication with technical/business

Tools

SAST

DAST

SCA

Job description

Priority Commerce seeks a Senior Product Security Engineer to embed security across the SDLC. You will partner with Engineering, Product, Legal, and Compliance to identify risks and influence secure design.

The role demands deep expertise in application/product security and the ability to translate complex concepts into practical guidance. You will lead security reviews, threat modeling, and tooling adoption, maturing CI/CD security and regulatory compliance across PCI-DSS, SOC 2 Type II, and