Senior Product Security Engineer — Secure by Design

Gallup; Omaha (NE); On-site; USD 100,000 - 160,000; Full time

Job summary

Gallup is seeking a Senior Security Engineer (Product Security) in Omaha to help build and scale security into our products. You will apply an attacker’s mindset to uncover real‑world risks and work with senior engineers to turn findings into durable, secure solutions.

You will perform penetration testing across web, mobile and API apps and partner with engineering teams to embed security from the start. This role emphasizes rapid, high‑impact work on-site three days a week.

Qualifications

• Bachelor’s degree in cybersecurity, information assurance, computer science or a related field required.
• At least four years of experience testing applications and contributing to improving their security.
• Demonstrated deep expertise in mobile, web and API penetration testing.
• Proven ability to partner with engineering teams to remediate vulnerabilities and improve secure development practices.
• Participation in bug bounty programs or responsible disclosure is a plus.
• Certifications such as OSCP, OSWE, GWAPT and GXPN are a plus.
• A commitment to working on-site at Gallup’s Omaha office at least three days per week required.

Responsibilities

• Perform penetration testing across web, mobile and API applications to identify and validate security vulnerabilities.
• Partner with engineering teams to incorporate security into applications from the start through secure coding guidance.

Skills

Penetration testing

Secure coding guidance

Threat detection

Clear communication

Team collaboration

Education

Bachelor's degree in cybersecurity

Job description

Gallup is seeking a Senior Security Engineer (Product Security) in Omaha to help build and scale security into our products. You will apply an attacker’s mindset to uncover real‑world risks and work with senior engineers to turn findings into durable, secure solutions.

You will perform penetration testing across web, mobile and API apps and partner with engineering teams to embed security from the start. This role emphasizes rapid, high‑impact work on-site three days a week.