Senior Product Security Engineer - Hybrid/Remote

TaxSlayer; North Carolina; Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Flexible work options

Wellness program

401(k) with match

Job summary

TaxSlayer is seeking a Senior Security Engineer – Product Security to partner with software teams, embedding security across the development lifecycle. You will identify risks, conduct assessments, manage the bug bounty program, and support regulatory compliance to protect sensitive data.

You will mentor engineers, drive secure coding practices, and coordinate security testing across applications, APIs, and cloud services. This role blends hands‑on security with strategic risk management.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Minimum of 5 years of experience in application security, product security, security engineering, or related field.
• Experience partnering with software development teams to integrate security into the development lifecycle.
• Experience identifying and validating vulnerabilities in web applications, APIs, and cloud environments.
• Strong knowledge of SDLC security practices and threat modeling methodologies.
• Familiarity with OWASP Top 10, CWE/SANS Top 25, and security testing tools.

Responsibilities

• Serve as primary security partner to development teams, integrating security across the SDLC.
• Review product features, designs, APIs, auth mechanisms, and third‑party integrations for risks.
• Lead secure code reviews, threat modeling, and architecture risk assessments.
• Conduct penetration testing and coordinate third‑party assessments as needed.
• Manage SAST, DAST, and CI/CD security tooling and remediation tracking.
• Administer and improve the bug bounty program and researcher engagement.
• Support audits, regulatory compliance, and security governance initiatives.
• Mentor engineers on secure coding practices and security standards.

Skills

Application security

Threat modeling

Secure coding practices

Penetration testing

CI/CD security

Vulnerability management

Regulatory awareness

Cloud security

Bug bounty programs

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Tools

SAST

DAST

CI/CD security tooling

Job description

TaxSlayer is seeking a Senior Security Engineer – Product Security to partner with software teams, embedding security across the development lifecycle. You will identify risks, conduct assessments, manage the bug bounty program, and support regulatory compliance to protect sensitive data.

You will mentor engineers, drive secure coding practices, and coordinate security testing across applications, APIs, and cloud services. This role blends hands‑on security with strategic risk management.