Senior Product Security Engineer - Threat Modeling

Cloud Software Group; San Ramon (CA); Presencial; USD 180.000 - 240.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare

401(k) plan with company match

Life insurance

Disability benefits

Descripción de la vacante

Cloud Software Group seeks a Senior Product Security Engineer to execute the Secure Software Development Lifecycle (SSDLC) for On-Prem and Cloud products, ensuring robust security aligned with customer expectations. You will guide product teams on secure design choices and conduct targeted code reviews using AI-assisted tools.

The role involves performing internal penetration tests and applying threat modelling to improve overall security posture.

Formación

• Full-time degree in Engineering (preferably Computer Science related)
• Expert in security areas: Windows/Unix, Network, Cryptography
• Strong C, C++, C# skills
• Strong Linux/Windows internals knowledge
• Good Networking knowledge (TCP/IP, HTTP/S, DNS)
• Understand file system concepts
• Experience with OO design concepts
• Knowledge of OWASP Top 10 across languages
• 6+ years of relevant experience
• Deep understanding of application architecture and design
• Experience in threat modelling and design reviews
• Ability to write exploits for identified vulnerabilities
• Strong ability to identify vulnerabilities and perform root cause analysis

Responsabilidades

• Execute SSDLC for Cloud Software Group On-Prem and Cloud products to ensure security robustness.
• Guide development teams on design changes per security requirements.
• Perform targeted, high-impact source code reviews (C, C++, C#) with AI-assisted tools.
• Execute internal penetration tests to identify vulnerabilities.

Conocimientos

C/C++/C#

Threat modeling

Source code review

Penetration testing

SSDLC/SDL

Linux internals

Networking TCP/IP

OWASP Top 10

Root cause analysis

Educación

Bachelor's degree in Engineering (CS related)

Descripción del empleo

Cloud Software Group seeks a Senior Product Security Engineer to execute the Secure Software Development Lifecycle (SSDLC) for On-Prem and Cloud products, ensuring robust security aligned with customer expectations. You will guide product teams on secure design choices and conduct targeted code reviews using AI-assisted tools.

The role involves performing internal penetration tests and applying threat modelling to improve overall security posture.