Senior Product Security Engineer

Paragon IT Professionals

Phoenix (AZ)

Hybrid

USD 150,000 - 184,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical insurance

Vision insurance

401(k)

Job summary

A leading company is seeking a Senior Product Security Engineer to enhance security practices within software development. The ideal candidate will have extensive experience in application security, Java, and DevSecOps, playing a key role in integrating security throughout the development lifecycle. This position offers a hybrid work model and a competitive salary package, including a substantial annual bonus.

Qualifications

6+ years of experience in application security or software engineering.
Proficiency in Java and securing APIs.
Hands-on experience with DevSecOps practices.

Responsibilities

Lead development of application security architecture patterns.
Integrate security controls into CI/CD pipelines.
Consult with teams to resolve security issues.

Skills

Application Security

Java

API Security

Secure Software Development

DevSecOps

Cloud Security

Threat Modeling

Education

Bachelor’s degree in Computer Science, Engineering, or related field

Tools

Veracode

Checkmarx

GitLab

Harness

Job description

2 days ago Be among the first 25 applicants

Paragon IT Professionals provided pay range

This range is provided by Paragon IT Professionals. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$150,000.00/yr - $184,000.00/yr

Direct message the job poster from Paragon IT Professionals

All applicants be eligible to work as a W2 employee without restriction.

No sub vendors, 1099s, corp to corps

Work can be performed in Chicago, San Francisco, Phoenix, or New York

**Salary depends on location***

Job Title: Senior Product Security Engineer

Location: Scottsdale, AZ | San Francisco, CA | Chicago, IL | New York, NY (Hybrid Work Model)

Salary Range: $160,000 – $185,000 + 15% Annual Bonus

Employment Type: Full-Time

Visa Sponsorship: Not available for this role

Position Summary

We are seeking a highly skilled Senior Product Security Engineer with a strong background in software development and application security. This role requires deep technical expertise in Java, application and API security, and secure software development practices. The ideal candidate will serve as a security-focused engineer partnering closely with product, engineering, and development teams to integrate security into the software development lifecycle.

Key Responsibilities

Lead the development and implementation of repeatable application security architecture patterns.
Develop threat models and reference security architectures for product teams.
Drive adoption of secure design and coding principles across engineering teams.
Integrate security controls into CI/CD pipelines and DevSecOps practices.
Consult and collaborate with engineering and development teams to identify and resolve security issues.
Implement and maintain security scanning tools (e.g., Veracode, Checkmarx, etc.).
Champion secure-by-design principles for cloud-native and containerized applications.
Mentor team members and foster a strong security culture within product and engineering teams.
Participate in security reviews, risk assessments, and documentation of identified threats and mitigation strategies.

Required Qualifications

Bachelor’s degree in Computer Science, Engineering, or a related field.
6+ years of combined experience in application security, software engineering, or security architecture.
Proficiency in Java and object-oriented programming.
Strong experience in securing APIs and applications.
Hands-on experience with DevSecOps practices and security in CI/CD environments.
Understanding of container security and cloud-native security principles.
Experience working with development teams on secure coding and secure software design.
Familiarity with security scanning tools and methodologies.

Preferred Qualifications

Experience with DevSecOps tools such as GitLab, Harness, and security automation.
Knowledge of security frameworks and compliance (ISO, PCI, OWASP, NIST).
Relevant certifications: CISSP, CSSLP, CEH, GWEB, AWS Security Specialization, etc.
Experience with public cloud providers (AWS, GCP, Azure) and Kubernetes.
Knowledge of threat modeling, cryptography, and network security.

Interview Process

Initial Interview: 45-minute session with Team Leader

Technical Deep Dive (1 hour)

Team Meet & Greet (1 hour)

Final Interview: 45-minute session with skip-level leadership

Work Environment and Physical Requirements

Hybrid work model; remote with required in-office days depending on location.
Primarily sedentary work involving extensive computer use.
Occasional lifting (up to 10 lbs) and physical activity may be required.
Must be able to perform essential duties with or without reasonable accommodation.

If you're passionate about secure development and want to play a critical role in protecting cutting-edge technology products, apply now to join a team driving innovation in cybersecurity.

Seniority level