Senior Product Security Engineer (Remote)

Priority Commerce; United States; À distance; USD 150 000 - 210 000; Plein temps

Résumé du poste

Priority Commerce is seeking a Senior Product Security Engineer to embed security across the SDLC. You will partner with Engineering, Product, Legal, and Compliance to identify and mitigate risks, influence secure architecture, and guide engineers in secure-by-design practices.

You will lead security design reviews, drive secure coding standards, and mature security tooling across CI/CD and cloud environments, while contributing to PCI-DSS and SOC 2 Type II compliance efforts.

Qualifications

• 5 years of experience in application security, product security, or a closely related technical role (e.g., DevOps or Application Development).
• Deep expertise in at least two of: web application security, API security, mobile security, or cloud security (AWS preferred).
• Strong proficiency in one or more programming languages (Python, Java, JavaScript, etc.).
• Experience with modern software development and application security tooling (SAST, DAST, SCA).
• Hands-on experience with threat modeling methodologies applied to complex distributed systems.
• Familiarity with security frameworks and standards relevant to fintech such as PCI-DSS, SOC 2 Type II, FFIEC, NIST CSF, and ISO 27001.
• Strong written and verbal communication skills with the ability to communicate effectively with both technical and business audiences.

Responsabilités

• Own security design reviews and threat modeling for high-risk product areas including payment processing, identity and access, fraud systems, and AI.
• Serve as a technical security authority for staff and principal engineers, providing guidance on secure architecture patterns, cryptography, and API security.
• Lead and execute application security assessments, red team exercises, and adversarial simulations against production and pre-production environments.
• Define and drive adoption of security standards, secure coding guidelines, and SAST/DAST/SCA tooling across engineering teams.
• Partner with the Engineering and DevOps teams to mature the security posture of CI/CD pipelines, cloud infrastructure, and container environments.
• Translate complex security risks into clear, prioritized recommendations for engineering leadership and product managers.
• Contribute to the team's regulatory compliance posture across PCI-DSS, SOC 2 Type II, and other applicable regulatory guidance.

Connaissances

Application security

Threat modeling

Security tooling

Strong communication

Programming languages

Outils

SAST tooling

DAST tooling

SCA tooling

Description du poste

Priority Commerce is seeking a Senior Product Security Engineer to embed security across the SDLC. You will partner with Engineering, Product, Legal, and Compliance to identify and mitigate risks, influence secure architecture, and guide engineers in secure-by-design practices.

You will lead security design reviews, drive secure coding standards, and mature security tooling across CI/CD and cloud environments, while contributing to PCI-DSS and SOC 2 Type II compliance efforts.