Senior Product Security Engineer - Build Security by Design

harnessinc; United States; On-site; USD 150,000 - 200,000; Full time

Job summary

Harness is seeking a Senior Product Security Engineer to oversee security initiatives across the platform. You will own end-to-end security work, partner with engineering, and build tooling to raise the security bar in the software delivery lifecycle.

You will design APIs, perform threat modeling and tests, and integrate SAST/DAST/ SCA into CI/CD. A strong background in DevSecOps and cloud-native environments is required.

Qualifications

• BS in Computer Science or related degree.
• 5+ years of security-focused software engineering experience.
• Experience with DevSecOps and secure SDLC practices.
• Familiarity with security frameworks including OWASP, SANS, NIST, and CIS.
• Experience with cloud environments (K8s, AWS, GCP, or Azure).
• Knowledge of enterprise apps, API development, and modern software delivery processes.
• Cloud-native environment experience.
• Proficient in Java or a comparable language and OO programming.
• Hands-on security testing and vulnerability management workflows.
• Ability to describe software supply chain risks and Secure SDLC best practices.

Responsibilities

• Design and develop product security APIs, tools, and utilities for internal and external stakeholders.
• Conduct threat modeling and secure design reviews for application backend services and business integrations.
• Perform advanced penetration tests and adversarial attack simulations against Harness modules, APIs, and codebase using industry-standard frameworks.
• Lead manual and automated code review efforts to discover vulnerabilities, weaknesses, and anti-patterns in the Harness platform.
• Implement and operate security tooling including SAST, DAST, and SCA, and integrate these into CI/CD pipelines.
• Consult and advise developers and Product Managers on security standards, vulnerability remediation, and security architecture.
• Assess risks and trade-offs, and propose solutions for product security features such as authentication and authorization.
• Participate in the creation, review, and implementation of technical security standards across global engineering teams.
• Use the Harness platform to integrate security processes like vulnerability management into the SDLC.
• Collaborate cross-functionally with Engineering and Product to accelerate the release of software with security by design.

Skills

Security engineering

Threat modeling

Penetration testing

CI/CD security

Cloud security

Java

Vulnerability management

DevSecOps

Secure SDLC

OWASP/NIST/CIS

Education

BS in Computer Science or related degree

Job description

Harness is seeking a Senior Product Security Engineer to oversee security initiatives across the platform. You will own end-to-end security work, partner with engineering, and build tooling to raise the security bar in the software delivery lifecycle.

You will design APIs, perform threat modeling and tests, and integrate SAST/DAST/ SCA into CI/CD. A strong background in DevSecOps and cloud-native environments is required.