Senior Product Security Engineer (Contract) (Fully Remote)

Iru; United States; Remote; USD 90,000 - 120,000; Part time

Job summary

Iru, an AI-powered security & IT platform, seeks a security contractor to embed security into the product development lifecycle for a six-month engagement in the United States. You will collaborate with Engineering, Cloud Security, Infrastructure, Compliance, and Product Management to balance security with developer velocity.

Responsibilities include security design reviews, threat modeling for applications and APIs, penetration testing, secure code reviews, and advancing automated security in

Qualifications

• Experience performing security design reviews and architecture reviews for new products.
• Ability to conduct threat modeling for applications, APIs, and AI-enabled services.
• Experience partnering with engineering to prioritize and remediate vulnerabilities.

Responsibilities

• Perform security design reviews and architecture reviews for new products.
• Conduct threat modeling for applications, APIs, and AI-enabled services.
• Partner with engineering to prioritize and remediate vulnerabilities.

Skills

Threat modeling

Security design reviews

Penetration testing

Secure coding practices

CI/CD security automation

Security tooling

Tools

Penetration testing tools

CI/CD tooling

Static/Dynamic analysis tools

Job description

• Embed security into the product development lifecycle for a 6-month contract.
• Work closely with Engineering, Cloud Security, Infrastructure, Compliance, and Product Management.
• Ensure security is integrated throughout the SDLC while enabling developer velocity.

Responsibilities:

• Perform security design reviews and architecture reviews for new products.
• Conduct threat modeling for applications, APIs, and AI-enabled services.
• Partner with engineering to prioritize and remediate vulnerabilities.

Security Testing:

• Conduct manual web, API, thick-client, and mobile application penetration testing.
• Validate third-party findings and perform secure code reviews.
• Verify remediation of security vulnerabilities.

Secure Development and Automation:

• Drive adoption of secure coding practices and define product security standards.
• Improve automation of security testing in CI/CD and integrate security tooling.
• Build scripts and tooling to reduce manual security work.

Iru

Iru is an AI-powered security & IT platform that unifies identity and access, endpoint security, and compliance automation for fast-growing companies. Backed by top investors and valued at $850 million, it serves customers like Cursor and Vercel, and is recognized for employee engagement.