Senior Product Security Engineer

Priority Technology Holdings, Inc.; United States; Remote; USD 115,000 - 145,000; Full time

Benefits offered by this job

401(k) match

Employee Stock Purchase Program (ESPP)

HSA and FSA options

Medical, dental, and vision coverage

Mental health support (Lyra Health)

Family planning benefits

Gym membership reimbursement

Job summary

Priority Technology Holdings, Inc. is seeking a Senior Product Security Engineer to embed security across the software development lifecycle.

You will partner with Engineering, Product, Legal, and Compliance to identify risks, influence architecture, and help engineers build secure products by design. You will lead security design reviews, threat modeling, and formal assessments for high-risk areas such as payments, identity, and fraud, while maturing CI/CD security and cloud/container controls

Qualifications

• 5 years of experience in application security, product security, or related technical role.
• Deep expertise in web application security, API security, cloud security or mobile security.
• Experience with SAST, DAST, SCA tooling.
• Hands-on threat modeling for complex distributed systems.
• Familiarity with PCI-DSS, SOC 2 Type II, FFIEC, NIST CSF, ISO 27001.

Responsibilities

• Own security design reviews and threat modeling for high-risk product areas (payments, identity, access, fraud, AI).
• Guide secure architecture patterns, cryptography, and API security for engineers.
• Lead application security assessments, red team exercises, and adversarial simulations.
• Define and drive secure coding guidelines and SAST/DAST/SCA tooling adoption.
• Mature CI/CD security, cloud infra, and container security with Eng/DevOps.

Skills

Application security

Threat modeling

Security tooling

Communication skills

Regulatory standards

Tools

SAST

DAST

SCA

Threat modeling tools

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Senior Product Security Engineer

Security & Compliance Professional Remote, US

Job title: Senior Product Security Engineer

Reports to: Manager, Application Security

Department: Central Services

Location: Remote

Grade: 19

About Priority:

Priority Commerceis a leading financial technology company on a mission to deliver a personalized, easy-to-adopt financial toolset that accelerates cash flow and optimizes working capital for businesses. Our vision is to eliminate the barriers to unlocking revenue - empowering businesses to grow faster and operate smarter.

We achieve this through the Priority Commerce Engine, an innovative platform that combines payables, acquiring, and banking and treasury solutions. This unified approach allows businesses to streamline financial operations, reduce unnecessary costs, and uncover new revenue opportunities.

At Priority Commerce, we're driven by results. We expect our people to be known for results - bringing expertise, momentum, and relentless focus to every challenge, helping our clients and each other thrive.

About the Role:

The Product Security Engineer plays a key role in embedding security throughout the software development lifecycle by partnering closely with Engineering, Product, Legal, and Compliance teams. This role is responsible for identifying and mitigating security risks, influencing secure architecture decisions, and helping engineers build secure products by design. The position requires deep technical expertise in application and product security, strong communication skills, and the ability to translate complex security concepts into practical guidance. You will contribute to securing Priority’s commerce platform while helping scale security practices, tooling, and frameworks across the organization.

Responsibilities:

Own security design reviews and threat modeling for high-risk product areas including payment processing, identity and access, fraud systems, and AI.

Serve as a technical security authority for staff and principal engineers, providing guidance on secure architecture patterns, cryptography, and API security.

Lead and execute application security assessments, red team exercises, and adversarial simulations against production and pre-production environments.

Define and drive adoption of security standards, secure coding guidelines, and SAST/DAST/SCA tooling across engineering teams.

Partner with the Engineering and DevOps teams to mature the security posture of CI/CD pipelines, cloud infrastructure, and container environments.

Translate complex security risks into clear, prioritized recommendations for engineering leadership and product managers.

Contribute to the team's regulatory compliance posture across PCI-DSS, SOC 2 Type II, and other applicable regulatory guidance.

What Success Looks Like:

Engineering teams treat you as a trusted security partner, not a gatekeeper, and they pull you into design conversations early because it makes their work better, not because they have to.

Threat models and security design reviews are completed at the right stage of the SDLC, reducing the volume of critical findings that reach production.

The security tooling (SAST, DAST, SCA) is adopted, tuned, and producing signal rather than noise with engineers acting on findings rather than ignoring them.

High-risk product areas (AI, payments, identity, fraud) have documented security architectures and known risk posture at all times.

Regulatory audits and customer security assessments in your domain produce no surprises, because controls are built in and well-evidenced.

Security debt in your areas of ownership is tracked, prioritized, and visibly decreasing over time.

Candidate Requirements:

Required

• 5 years of experience in application security, product security, or a closely related technical role (e.g., DevOps or Application Development).
• Experience in application security, product security, or a closely related technical role.
• Deep expertise in at least two of the following security domains: web application security, API security, mobile security (iOS/Android), or cloud security (AWS preferred).
• Experience with modern software development and application security tooling (SAST, DAST, SCA, etc.).
• Hands-on experience with threat modeling methodologies applied to complex distributed systems.
• Familiarity with security frameworks and standards relevant to fintech such as PCI-DSS, SOC 2 Type II, FFIEC, NIST CSF, and ISO 27001.
• Strong written and verbal communication skills with the ability to communicate effectively with both technical and business audiences.

Preferred

• Experience securing fintech, payments, or regulated financial products.
• Experience supporting cloud-native architectures and modern CI/CD environments.
• Experience participating in red team exercises, penetration testing, or adversarial simulations.
• Security certifications such as CISSP, CSSLP, OSCP, GIAC, or similar credentials.
• Experience working closely with engineering organizations in highly regulated environments.

We believe that performance and experience go hand in hand - an exceptional employee experience is earned through contribution . We are a results-driven team, grounded in our core values: ownership, authenticity, service, trust, innovation, and camaraderie.

Our culture is built for those who want to make an impact. We challenge each other to grow, celebrate progress, and support one another through shared goals and real connection. Whether you're building technology, serving clients, or supporting internal teams, you’ll be part of a company that empowers you to perform at your best and be known for results.

Compensation and Benefits:

Compensation range: $115K-$145K
We invest in the whole employee - personally and professionally. Our benefits package is designed to support your well-being, growth, and success - both inside and outside of work.

• 401(k) match
• Employee Stock Purchase Program (ESPP)
• HSA and FSA options
• Financial wellness resources and employee discount programs
• Medical, dental, and vision coverage
• Mental health support for employees and dependents through Lyra Health
• Family planning and women’s health benefits through Carrot
• Gym membership reimbursement and virtual wellness programs (including yoga)

Time Off

• 3 weeks PTO to start, with unlimited PTO after year one

Growth & Development

• Certified Payments Professional (CPP) certification support

We believe great performance starts with feeling supported - and we’ve built our benefits with that in mind.

Traditional Physical Requirements:

• Requires prolonged sitting, standing, bending, stooping and stretching.
• Requires the ability to lift 10 pounds.
• Requires eye-hand coordination, manual dexterity and a normal range of hearing and vision (with or without correction).

Join our team at Priority Technology Holdings, Inc. and be part of a dynamic and innovative company that is transforming the financial technology landscape. Together, we can shape the future of payments and banking solutions while providing unmatched value to our clients.