Senior Product Security Engineer - Drive Security by Design

Rippling; Seattle (WA); On-site; USD 189,000 - 315,000; Full time

Job summary

Rippling is seeking a hands-on Staff Product Security Engineer in Seattle, WA to help build and scale its Product Security program. You’ll work with engineering teams to integrate security into the SDLC, conduct threat modeling, and perform code reviews for critical changes.

You will mentor engineers, drive security assessments, and develop tooling to eliminate vulnerabilities at scale while aligning with business goals and compliance needs in a fast-growing company.

Qualifications

• 10+ years of experience in a product security role.
• Experience leading architectural changes or complex cross-team efforts to mitigate security vulnerabilities.
• Deep understanding of securing web applications.
• Fluency in Python, React, and Django Rest Framework.
• Experience with manual source code review, and embedding security to code in production environments.
• Experience with deploying application security tools in the CI/CD pipeline.
• Experience with securing software development lifecycle including building programs that eliminate full classes of vulnerabilities.

Responsibilities

• Build guardrails and controls to eliminate full classes of vulnerabilities within the Rippling application.
• Build security tooling and automations to help scale the Product Security team’s practices.
• Threat‑model application designs and solutions and provide security assessments.
• Audit source code and perform code review for critical application changes.
• Mentor software engineering teams in security best practices.
• Provide hands‑on remediation guidance to development teams.
• Review & establish software development practices that make security an essential part of the development process.
• Develop / Integrate security into the Software Development Life Cycle.

Skills

10+ years product security

Architectural changes lead

Web security

Python

React

Django Rest Framework

Code review

CI/CD security tools

Secure SDLC

Job description

Rippling is seeking a hands-on Staff Product Security Engineer in Seattle, WA to help build and scale its Product Security program. You’ll work with engineering teams to integrate security into the SDLC, conduct threat modeling, and perform code reviews for critical changes.

You will mentor engineers, drive security assessments, and develop tooling to eliminate vulnerabilities at scale while aligning with business goals and compliance needs in a fast-growing company.