Senior Product Security Engineer - SSDLC & Threat Modeling

Cloud Software Group, LLC; San Ramon (CA); On-site; USD 170,000 - 210,000; Full time

Benefits offered by this job

Healthcare benefits

Life insurance

Disability benefits

401(k) plan with company match

Job summary

Cloud Software Group is seeking a Senior Product Security Engineer to drive secure software lifecycle initiatives across on-prem and cloud products. You will guide design changes, perform source code reviews, and conduct internal penetration testing to identify vulnerabilities.

The role demands deep expertise in C/C++/C#, Linux and Windows internals, and strong threat modelling capabilities to ensure robust security across complex architectures.

Qualifications

• Full-time degree in Engineering (Preferably Computer Science related).
• Expert in at least one security area: Windows / Unix System, Network, Cryptography.
• Strong C, C++, C# skills.
• Strong Linux and Windows internals knowledge, including low-level system architecture.
• Good knowledge of Networking (TCP/IP) and other protocols like HTTP/S, DNS.
• Basic understanding of File system concepts.
• Experience with object-oriented design concepts.
• Extensive knowledge of common vulnerabilities and OWASP Top 10 across multiple languages.
• 6+ years of relevant experience.
• Deep understanding of application architecture and design principles.
• Experience in design review and threat modelling activities.
• Ability to write exploits for vulnerabilities.
• Ability to identify security vulnerabilities and perform root cause analysis.

Responsibilities

• Execute the Secure Software Development Lifecycle (SSDLC) for Cloud Software Group On-Prem and Cloud products.
• Guide product development teams on design changes as per security requirements.
• Perform targeted source code reviews (C, C++, C#) with AI-assisted tools.
• Execute internal penetration tests to identify vulnerabilities.

Skills

C

C++

C#

Linux internals

Windows internals

Networking (TCP/IP)

OWASP Top 10

Threat modelling

Security analysis

Exploits development

Education

Bachelor's degree in Engineering (CS related)

Tools

Penetration testing tools

Job description

Cloud Software Group is seeking a Senior Product Security Engineer to drive secure software lifecycle initiatives across on-prem and cloud products. You will guide design changes, perform source code reviews, and conduct internal penetration testing to identify vulnerabilities.

The role demands deep expertise in C/C++/C#, Linux and Windows internals, and strong threat modelling capabilities to ensure robust security across complex architectures.