Senior Product Security Engineer - Hybrid/Remote

TaxSlayer; Virginia (MN); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Flexible Work Options

401k match

Health Insurance

Paid holidays and PTO

Company paid parking

Education assistance

Job summary

TaxSlayer is seeking a Senior Security Engineer Product Security in a hybrid role based in the Augusta, GA area. You will partner with software development teams to embed security across the SDLC, conduct threat modeling and security testing, and manage bug bounty activities.

You will mentor engineers and support PCI DSS, SOC 2, and IRS security requirements. The role offers a blend of on-site collaboration and remote flexibility, with potential fully remote options for eligible states.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT or related field or equivalent
• Minimum of 5 years of experience in application security or product security
• Experience partnering with software dev teams to integrate security
• Experience identifying vulnerabilities in web apps, APIs, cloud environments

Responsibilities

• Serve as primary security point of contact for development teams during sprint planning and design reviews
• Review features, designs, APIs and integrations to identify security risks
• Partner with engineering to embed security controls early in SDLC and promote secure coding
• Conduct secure code reviews, threat modeling, architecture risk assessments and testing
• Perform hands-on penetration testing and coordinate third-party testing when needed
• Manage SAST/DAST and CI/CD security tooling and processes
• Track vulnerabilities through remediation and work with teams to remediate
• Administer bug bounty program including researcher engagement and triage
• Monitor bug bounty performance and suggest process improvements
• Support audits and regulatory compliance related to PCI DSS, SOC 2, IRS security requirements
• Mentor teams on secure coding and threat modeling

Skills

Security engineering

Threat modeling

Vulnerability assessment

Secure coding practices

Penetration testing

CI/CD security tooling

Education

Bachelor's degree in Cybersecurity or related field

Tools

SAST

DAST

Code review

Job description

TaxSlayer is seeking a Senior Security Engineer Product Security in a hybrid role based in the Augusta, GA area. You will partner with software development teams to embed security across the SDLC, conduct threat modeling and security testing, and manage bug bounty activities.

You will mentor engineers and support PCI DSS, SOC 2, and IRS security requirements. The role offers a blend of on-site collaboration and remote flexibility, with potential fully remote options for eligible states.