Senior Product Security Engineer: Build Secure SDLC & Tools

Split Software; United States; On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Pay transparency

Job summary

Harness, the AI Software Delivery Platform, is seeking a Senior Product Security Engineer. You will own end-to-end security initiatives across the platform, partner closely with engineering and product teams to identify and remediate vulnerabilities, and build tooling that raises the bar for security throughout the development lifecycle.

This role emphasizes hands-on security testing, threat modeling, and secure SDLC practices, with collaboration across global teams to ship software securely by

Qualifications

• 5+ years of relevant industry experience with a strong security focus.
• Solid experience with DevSecOps and secure SDLC methodologies.
• Good working knowledge of cyber security frameworks including OWASP, SANS, NIST, and CIS.
• Experience with public or private cloud environments such as K8s, AWS, GCP, or Azure.
• Proficiency in Java and object-oriented programming.
• Hands-on experience with security testing tools and vulnerability management workflows.
• Ability to describe software supply chain risks and Secure SDLC best practices.

Responsibilities

• Design and develop product security APIs, tools, and utilities for internal and external stakeholders.
• Conduct threat modeling and secure design reviews for application backend services and business integrations.
• Perform advanced penetration tests and adversarial attack simulations against Harness modules, APIs, and codebase using industry-standard frameworks.
• Lead manual and automated code review efforts to discover vulnerabilities, weaknesses, and anti-patterns in the Harness platform.
• Implement and operate security tooling including SAST, DAST, and SCA, and integrate these into CI/CD pipelines.
• Consult and advise developers and Product Managers on security standards, vulnerability remediation, and security architecture.
• Assess risks and trade-offs, and propose solutions for product security features such as authentication and authorization.
• Participate in the creation, review, and implementation of technical security standards across global engineering teams.
• Use the Harness platform to integrate security processes like vulnerability management into the SDLC.
• Collaborate cross-functionally with Engineering and Product to accelerate the release of software with security by design.

Skills

Security

DevSecOps

Secure SDLC

Threat modeling

Code review

Penetration testing

Cloud experience

Java

Education

BS in Computer Science

Tools

CI/CD tooling

Security testing tools

Vulnerability management tools

Kubernetes

AWS

GCP

Azure

Job description

Harness, the AI Software Delivery Platform, is seeking a Senior Product Security Engineer. You will own end-to-end security initiatives across the platform, partner closely with engineering and product teams to identify and remediate vulnerabilities, and build tooling that raises the bar for security throughout the development lifecycle.

This role emphasizes hands-on security testing, threat modeling, and secure SDLC practices, with collaboration across global teams to ship software securely by