Senior Product Security Engineer - Hybrid/Remote

TaxSlayer; North Augusta (GA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Remote options

Hybrid work

PTO

Health insurance

401(k) match

Bonuses

Education assistance

On-site fitness facility

Life insurance

Disability coverage

Wellness program

Job summary

TaxSlayer in Augusta, GA is seeking a Senior Security Engineer – Product Security to partner with software teams, embed security across the SDLC, and manage the bug bounty program. This role focuses on identifying risks, conducting assessments, and supporting governance and compliance initiatives.

The position offers hybrid work in Augusta with on-site days and remote days, with a potential fully remote option for residents of GA/SC/NC/FL/TN.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Minimum of 5 years of experience in application security, product security, security engineering, or related field.
• Experience partnering with software development teams to integrate security into the SDLC.
• Experience identifying vulnerabilities in web apps, APIs, and cloud environments.
• Strong knowledge of SDLC practices and threat modeling methodologies (STRIDE/PASTA).
• Knowledge of OWASP Top 10, CWE/SANS Top 25, and security tooling (SAST/DAST).
• Preferred OSCP/OSWE/GWAPT/CSSLP or similar certifications; bug bounty experience helpful.

Responsibilities

• Serve as primary security point of contact for assigned development teams, participating in sprint planning and design reviews.
• Review features, designs, APIs, and third-party integrations to identify risks and mitigate security issues.
• Partner with engineering to embed security controls early in the SDLC and promote secure coding practices.
• Conduct secure code reviews, threat modeling, architecture risk assessments, and security testing.
• Perform hands-on penetration testing and coordinate third-party testing as needed.
• Manage SAST/DAST and CI/CD security tooling and remediation tracking.
• Own bug bounty program administration, triage, validation, and remediation coordination.
• Support governance, risk, and compliance activities including PCI DSS, SOC 2, IRS security requirements.

Skills

Security engineering

Threat modeling

Secure code review

Penetration testing

CI/CD security

Bug bounty

Risk & compliance

Communication

Education

Bachelors in Cybersecurity or CS

Tools

SAST tooling

DAST tooling

CI/CD security tools

OWASP Top 10

Job description

TaxSlayer in Augusta, GA is seeking a Senior Security Engineer – Product Security to partner with software teams, embed security across the SDLC, and manage the bug bounty program. This role focuses on identifying risks, conducting assessments, and supporting governance and compliance initiatives.

The position offers hybrid work in Augusta with on-site days and remote days, with a potential fully remote option for residents of GA/SC/NC/FL/TN.