Senior Product Security Engineer — Build Secure AI Delivery

Harness; United States; On-site; USD 150,000 - 200,000; Full time

Job summary

Harness is seeking a Senior Product Security Engineer to own end-to-end security initiatives across the Harness platform. You will partner with engineering and product teams to identify vulnerabilities, remediate risks, and elevate security across the development lifecycle.

You will design security tooling, conduct threat modeling, and lead advanced testing to defend our software from evolving threats while enabling rapid, secure software delivery.

Qualifications

• BS in Computer Science or related degree.
• 5+ years of security-focused industry experience.
• Strong DevSecOps and secure SDLC knowledge.
• Familiar with OWASP, SANS, NIST, CIS.
• Experience with cloud environments (K8s, AWS, GCP, Azure).

Responsibilities

• Design and develop product security APIs, tools, and utilities.
• Conduct threat modeling and secure design reviews for backend services.
• Perform advanced penetration tests and adversarial simulations.
• Lead manual and automated code review for vulnerabilities.
• Implement and operate SAST, DAST, and SCA in CI/CD.
• Advise developers on security standards and remediation.
• Assess risks and trade-offs for security features.
• Create and implement technical security standards across teams.
• Use Harness platform to integrate vulnerability management in SDLC.
• Collaborate with Engineering and Product to speed secure releases.

Skills

DevSecOps

Secure SDLC

Cloud security

Java

Penetration testing

Threat modeling

Security tooling

CI/CD security

Education

BS in Computer Science

Tools

SAST

DAST

SCA

Kubernetes

AWS

GCP

Azure

Job description

Harness is seeking a Senior Product Security Engineer to own end-to-end security initiatives across the Harness platform. You will partner with engineering and product teams to identify vulnerabilities, remediate risks, and elevate security across the development lifecycle.

You will design security tooling, conduct threat modeling, and lead advanced testing to defend our software from evolving threats while enabling rapid, secure software delivery.