Senior Product Security Engineer: SSDLC Lead

Cloud Software Group, LLC; San Ramon (CA); On-site; USD 192,000 - 287,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) with company match

Bonus potential

Job summary

Cloud Software Group, LLC is seeking a Lead Product Security Engineer to lead SSDLC for On-Prem and Cloud products. You will work hands-on with security across engineering teams to drive robust security designs and reviews.

Responsibilities include manual code reviews (C/C++), crash analysis with GDB, and conducting internal penetration tests. You will propose scalable solutions and prototypes to prevent security issues at scale, aligning with OWASP guidelines.

Qualifications

• 9+ years of hands-on experience in product security with emphasis on C/C++ development and security analysis.
• A full-time degree in Engineering (preferably Computer Science related).
• Expertise in at least one security area (Unix systems, networking, cryptography).
• Hands-on C/C++ with strong low-level Linux systems knowledge.

Responsibilities

• Lead and execute the Secure Software Development Lifecycle (SSDLC) for Cloud Software Group On-Prem and Cloud products to ensure security robustness.
• Provide guidance to product development teams on design changes per security requirements.
• Perform manual source code review primarily in C and C++.
• Analyze crashes to identify vulnerabilities using GDB and core dump analysis.
• Execute penetration tests to identify security vulnerabilities.
• Develop prototypes to prevent security problems at scale.

Skills

C/C++ development

Security analysis

Low-level Linux systems

Networking (TCP/IP, HTTP/S, DNS)

GDB debugging

Threat modelling

Vulnerability remediation

Reverse engineering

Fuzzing (AFL, Peach)

Education

Bachelor's degree in Engineering (CS related)

Tools

GDB

Makefiles

AFL

Peach

Job description

Cloud Software Group, LLC is seeking a Lead Product Security Engineer to lead SSDLC for On-Prem and Cloud products. You will work hands-on with security across engineering teams to drive robust security designs and reviews.

Responsibilities include manual code reviews (C/C++), crash analysis with GDB, and conducting internal penetration tests. You will propose scalable solutions and prototypes to prevent security issues at scale, aligning with OWASP guidelines.