Senior Product Security Engineer - Hybrid (Remote Possible)

TaxSlayer; Charlotte (NC); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible Work Options

Remote and Hybrid Work

PTO and holidays

Health, Dental, Vision insurance

401(k) with match

Performance-based bonuses

Life insurance

Education assistance

On-site fitness facility

Job summary

TaxSlayer is seeking a Senior Security Engineer – Product Security to partner with software development teams and embed security across the SDLC. You will identify and mitigate risks, review designs, and coordinate testing and vulnerability remediation.

You will lead threat modeling, secure coding, and compliance efforts, while mentoring teams and advancing our bug bounty program. Hybrid/remote roles support flexible work arrangements.

Qualifications

• Bachelor's degree or equivalent combination of education and experience.
• Minimum of 5 years of experience in application security or related field.
• Experience partnering with software development teams to integrate security into the SDLC.
• Experience identifying vulnerabilities in web apps, APIs, and cloud environments.
• Strong knowledge of secure SDLC practices.
• Experience with threat modeling methodologies such as STRIDE or PASTA.
• Knowledge of OWASP Top 10 and CWE/SANS Top 25.
• Experience with SAST, DAST, penetration testing, code review, and CI/CD security tools.
• Strong understanding of web app, API, and cloud security principles.
• Ability to communicate technical risks to technical and non-technical audiences.
• Preferred certifications include OSCP, OSWE, GWAPT, CSSLP.
• Experience with bug bounty or vulnerability disclosure programs is preferred.
• Familiarity with PCI DSS, SOC 2, IRS security requirements, CCPA, and related standards.

Responsibilities

• Serve as primary security partner to software development teams across SDLC.
• Identify and mitigate security risks in features, designs, APIs, and integrations.
• Promote secure coding practices and early security controls in development.
• Perform secure code reviews, threat modeling, and architecture risk assessments.
• Conduct penetration testing and coordinate third-party testing when needed.
• Manage SAST, DAST, and CI/CD security tooling and processes.
• Track vulnerabilities and drive remediation with engineering teams.
• Oversee bug bounty program administration, triage, and remediation coordination.
• Monitor bug bounty metrics and propose process improvements.
• Support PCI DSS, SOC 2, IRS requirements and other regulations.
• Maintain product security risk documentation and assist with incident response.

Skills

Security engineering

Threat modeling

SAST

DAST

Penetration testing

CI/CD security

Bug bounty programs

Regulatory compliance

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

SAST

DAST

CI/CD tooling

Job description

TaxSlayer is seeking a Senior Security Engineer – Product Security to partner with software development teams and embed security across the SDLC. You will identify and mitigate risks, review designs, and coordinate testing and vulnerability remediation.

You will lead threat modeling, secure coding, and compliance efforts, while mentoring teams and advancing our bug bounty program. Hybrid/remote roles support flexible work arrangements.