Senior Product Security Engineer

Cloud Software Group; San Ramon (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Healthcare

401(k) plan with company match

Life insurance

Disability benefits

Job summary

Cloud Software Group seeks a Senior Product Security Engineer to execute the Secure Software Development Lifecycle (SSDLC) for On-Prem and Cloud products, ensuring robust security aligned with customer expectations. You will guide product teams on secure design choices and conduct targeted code reviews using AI-assisted tools.

The role involves performing internal penetration tests and applying threat modelling to improve overall security posture.

Qualifications

• Full-time degree in Engineering (preferably Computer Science related)
• Expert in security areas: Windows/Unix, Network, Cryptography
• Strong C, C++, C# skills
• Strong Linux/Windows internals knowledge
• Good Networking knowledge (TCP/IP, HTTP/S, DNS)
• Understand file system concepts
• Experience with OO design concepts
• Knowledge of OWASP Top 10 across languages
• 6+ years of relevant experience
• Deep understanding of application architecture and design
• Experience in threat modelling and design reviews
• Ability to write exploits for identified vulnerabilities
• Strong ability to identify vulnerabilities and perform root cause analysis

Responsibilities

• Execute SSDLC for Cloud Software Group On-Prem and Cloud products to ensure security robustness.
• Guide development teams on design changes per security requirements.
• Perform targeted, high-impact source code reviews (C, C++, C#) with AI-assisted tools.
• Execute internal penetration tests to identify vulnerabilities.

Skills

C/C++/C#

Threat modeling

Source code review

Penetration testing

SSDLC/SDL

Linux internals

Networking TCP/IP

OWASP Top 10

Root cause analysis

Education

Bachelor's degree in Engineering (CS related)

Job description

About Cloud Software Group

Cloud Software Group combinesthe capabilities of both Citrix and TIBCO, creating one of the world’s largest cloud software providers, serving more than 100 million users around the globe. When you join Cloud Software Group, you are making a difference for real people, each of whom count on our suite of cloud solutions to get work done – from anywhere. Members of our team will tell you that wevalue diverse lived experiences, varied perspectives, and having the courage to take risks. Our teams are encouraged to learn, dream, and build the future of work. We are on the brink of another Cambrian leap - a moment of immense evolution and growth. And we need your expertise and experience to do it. Now is the perfect time to move your skills to the cloud

About This Team

YOU as a Senior Product Security Engineer will have the opportunity to collaborate with the brightest engineering minds and work on innovative product security areas.

Job Description

You are/have worked on Threat Modelling , Source Code Review , Penetration Testing and performing security analysis on existing or new products and provide security guidance and input to product engineers. You have worked on problems of varied scope independently and able to drive strategy for Product Security in the limited scope of work and provide general guidance and/or direction on routine work to achieve overall program performance, schedule, and quality standards

Position Overview

Senior Product Security Engineer is responsible for executing the Security Development Lifecycle (SDL) for Cloud Software Group On-Prem and Cloud products to ensure that our software meets the customer expectation of security robustness.and drive and execute SDL best practices

Duties and Responsibilities

• You will be responsible for executing the Secure Software Development Lifecycle (SSDLC) for Cloud Software Group On-Prem and Cloud products to ensure that oursoftware meets the customer expectation ofsecurity robustness.

• You will guide product development teams on design changes as per security requirements.

• Perform targeted, high-impact source code reviews (C, C++, C#) integrated with modern AI-assisted tools.

• Execute the penetration tests internally to identify security vulnerabilities.
  

Basic Qualifications

• You have a Full-time degree in Engineering (Preferably Computer Science related)

• You are an expert in at least one of these areas in security – Windows / Unix System, Network, Cryptography

• Strong C, C++, C# skills

• Strong Linux and Windows internals knowledge, including low-level system architecture.

• Good knowledge of Networking (TCP/IP) and other protocols like HTTP/S, DNS, et.al.

• Basic understanding of File system concepts.

• Experience with object-oriented design concepts.

• Extensive knowledge of common vulnerabilities - able to explain and remediate the OWASP Top 10 vulnerabilities across multiple programming languages

• 6+ years of relevant experience .

• Deep understanding of application architecture and design principles

• Experience in design review and threat modelling activities

• You are capable of writing exploits for vulnerabilities identified in those respective areas.

• Have excellent capabilities to identify security vulnerabilities and perform root cause analysis.

Compensation may vary depending on your location, qualifications including job-related education, training, experience, licensure, and certification, that could result at a level outside of these ranges. Certain roles are eligible for additional rewards, including annual bonus, and sales incentives depending on the terms of the applicable plan and role as well as individual performance.CA generally ranges: $1-$100,000,000All other locations fall under our General State range: $1-$100,000,000Benefits may vary depending on the nature of your employment with Cloud Software Group and the country where you work. U.S. based employees are typically offered access to healthcare, life insurance and disability benefits, 401(k) plan and company match, among others. This requisition has no specific deadline for completion.

About Us:

Cloud Software Group is one of the world’s largest cloud solution providers, serving more than 100 million users around the globe. When you join Cloud Software Group, you are making a difference for real people, each of whom count on our suite of cloud-based products to get work done — from anywhere. Members of our team will tell you that we value passion for technology and the courage to take risks. Everyone is empowered to learn, dream, and build the future of work. We are on the brink of another Cambrian leap -- a moment of immense evolution and growth. And we need your expertise and experience to do it. Now is the perfect time to move your skills to the cloud.

Cloud Software Group is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination. All qualified applicants will receive consideration for employment without regard to age, race, color, creed, sex or gender, sexual orientation, gender identity, gender expression, ethnicity, national origin, ancestry, citizenship, religion, genetic carrier status, disability, pregnancy, childbirth or related medical conditions (including lactation status), marital status, military service, protected veteran status, political activity or affiliation, taking or requesting statutorily protected leave and other protected classifications.

Cloud Software Group will consider qualified applicants with a criminal history and conduct the recruiting process in accordance with the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers and San Diego Fair Chance Ordinance. For access to the laws see the following links: California FCA and Los Angeles FCO.

If you need a reasonable accommodation due to a disability during any part of the application process, please contact us via the Bridge portal for assistance.