Senior Product Security Engineer

harnessinc; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

HarnessInc is seeking a security-focused professional to lead hands-on security work across customer-facing software and internal tools. You will collaborate with engineering and product teams to identify risks, improve secure development practices, and build tooling to embed security into the software lifecycle.

Responsibilities include threat modeling, security testing, and advising on architecture and authentication decisions.

Qualifications

• Bachelor's degree in computer science or related field.
• At least five years of relevant industry security experience.
• Experience with DevSecOps and secure SDLC.
• Familiarity with OWASP, NIST, CIS and software supply chain risks.

Responsibilities

• Design security APIs, tools, and utilities for internal and external users.
• Threat-model backend services and integrations, and review designs for security risks.
• Test applications, APIs, and code through penetration testing, attack simulations, and manual or automated review.
• Operate security testing tools, including static, dynamic, and dependency analysis, and connect them to CI/CD pipelines.
• Advise developers and product managers on security architecture, standards, vulnerability fixes, and authentication or authorization decisions.
• Help establish security standards and integrate vulnerability management into development workflows.

Skills

Security expertise

Threat modeling

CI/CD security

Education

Bachelor's degree in computer science or related field

Tools

SAST

DAST

Vulnerability mgmt

Job description

Role overview

Lead hands-on security work across customer-facing software and internal tools. You'll help engineering and product teams find and fix risks, strengthen secure development practices, and build tools and processes that make security part of the software lifecycle.

Responsibilities

• Design security APIs, tools, and utilities for internal and external users.
• Threat-model backend services and integrations, and review designs for security risks.
• Test applications, APIs, and code through penetration testing, attack simulations, and manual or automated review.
• Operate security testing tools, including static, dynamic, and dependency analysis, and connect them to CI/CD pipelines.
• Advise developers and product managers on security architecture, standards, vulnerability fixes, and authentication or authorization decisions.
• Help establish security standards and integrate vulnerability management into development workflows.

Requirements

• Bachelor's degree in computer science or a related field.
• At least five years of relevant industry experience with a strong security focus.
• Experience with DevSecOps, secure development lifecycles, security testing, and vulnerability management.
• Working knowledge of security frameworks such as OWASP, SANS, NIST, or CIS, and software supply chain risks.
• Experience with cloud environments, such as Kubernetes and a major public cloud, and with enterprise applications, APIs, and modern delivery practices.
• Proficiency in Java or a comparable language, with knowledge of object-oriented programming.