Senior Product Security Engineer (6-Month Contract)

Kandji; United States; Remote; USD 140,000 - 180,000; Full time

Job summary

Iru is seeking a Senior Product Security Engineer for a hands-on 6-month contract (40 hours/week) to embed security into the product lifecycle. You will identify risks, work with development teams on remediation, and conduct security reviews and testing across web, API, and AI-enabled services.

The role partners with Engineering, Cloud Security, Infrastructure, Compliance, and Product Management to ensure security is integrated throughout the SDLC while maintaining developer velocity.

Qualifications

• 5+ years in product or application security.
• Experience securing Web apps, APIs, microservices and cloud-native apps.
• Experience with threat modeling and penetration testing.
• Ability to partner with engineering teams and communicate security risks clearly.

Responsibilities

• Perform security design and architecture reviews for new products and features.
• Conduct threat modeling for applications, APIs, and AI-enabled services.
• Review authentication, authorization, and access control implementations.
• Perform manual security testing of web, API, thick-client, and mobile apps.
• Drive adoption of secure coding practices and SDLC security.
• Triage findings from SAST, DAST, SCA, and track remediation.

Skills

Product Security

Threat Modeling

Penetration Testing

OWASP Top 10

CI/CD Security

Tools

Snyk

Burp Suite Pro

Semgrep

Wiz

GitHub Advanced Security

Job description

Iru is seeking a Senior Product Security Engineer for a hands-on 6-month contract (40 hours/week) to embed security into the product lifecycle. You will identify risks, work with development teams on remediation, and conduct security reviews and testing across web, API, and AI-enabled services.

The role partners with Engineering, Cloud Security, Infrastructure, Compliance, and Product Management to ensure security is integrated throughout the SDLC while maintaining developer velocity.