Senior Product Security Engineer - Hybrid/Remote

TaxSlayer; Georgia; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible Work Options

Generous Time Off

Health & Wellness Coverage

Education assistance

Company paid parking

Unlimited coffee

Job summary

TaxSlayer is seeking a Senior Security Engineer focused on product security. You will partner with software teams to embed security throughout the SDLC, perform threat modeling and security testing, and lead incident response initiatives.

The role emphasizes hands-on security reviews, bug bounty coordination, and ongoing risk management. The position offers a hybrid/remote arrangement with potential for fully remote for eligible states.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field
• Minimum 5 years of experience in application security/product security/security engineering
• Experience partnering with software development teams to integrate security into the lifecycle
• Experience identifying and validating vulnerabilities in web apps, APIs, and cloud environments

Responsibilities

• Serve as the primary security point of contact for assigned development teams during sprint planning and design reviews
• Review product features, designs, APIs, authentication mechanisms, and third-party integrations to identify and mitigate security risks
• Partner with engineering teams to embed security controls early in the SDLC and promote secure coding practices
• Conduct secure code reviews, threat modeling, architectural risk assessments, and security testing for apps and releases
• Perform hands-on penetration testing and coordinate third-party testing as appropriate
• Manage and optimize SAST, DAST, and CI/CD security tooling and processes
• Track vulnerabilities through remediation and collaborate with engineering teams to address findings
• Oversee bug bounty program administration, researcher engagement, submission triage, validation, and remediation coordination
• Monitor bug bounty metrics and recommend process improvements
• Support governance, risk and compliance activities including audits (PCI DSS, SOC 2, IRS security requirements)
• Contribute to enterprise risk management and maintain product security risk documentation
• Assist with security incident response activities including investigation, root cause analysis, remediation tracking
• Mentor engineering teams on secure coding, threat modeling, and product security best practices
• Other duties as assigned

Skills

Secure SDLC

Threat modeling STRIDE

Threat modeling PASTA

OWASP Top 10

CWESANS Top 25

SAST

DAST

Penetration testing

CI/CD security tooling

Cloud security

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

SAST tooling

DAST tooling

Cloud security tools

Threat modeling tools

Job description

TaxSlayer is seeking a Senior Security Engineer focused on product security. You will partner with software teams to embed security throughout the SDLC, perform threat modeling and security testing, and lead incident response initiatives.

The role emphasizes hands-on security reviews, bug bounty coordination, and ongoing risk management. The position offers a hybrid/remote arrangement with potential for fully remote for eligible states.