Staff Product Security Engineer

Delinea; Redwood City (CA); À distance; USD 180 000 - 260 000; Plein temps

Avantages offerts par ce poste

Healthcare insurance

Bonus program

Retirement matching

Résumé du poste

Delinea’s Principal Product Security Engineer will shape the strategy of the Product Security Program, performing secure design reviews, threat modeling, and consultancy across product and cloud security.

The role collaborates with Enterprise Architecture, Development, DevOps, and Cloud teams, balancing security with business needs while driving innovative security solutions and SSDLC improvements.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 12+ years in Cybersecurity with 7+ years in Product Security (architecture, threat modeling, secure design).
• Experience in threat modeling and secure design within SSDLC.
• In-depth knowledge of product security best practices and threat landscape.
• Proficiency with Azure and AWS cloud platforms.
• Hands-on experience with security tooling across CI/CD pipelines.
• Strong leadership, communication, and stakeholder influence.
• Experience with security audits and handling customer security inquiries.

Responsabilités

• Provide security leadership across Delinea’s product offerings.
• Lead end-to-end security architecture reviews and threat modeling.
• Drive security in product strategy and roadmaps.
• Collaborate with Enterprise Architecture, Development, DevOps, and Cloud teams.
• Automate security operations within CI/CD pipelines.
• Mentor Product Security team members.
• Respond to security incidents and coordinate remediation.

Connaissances

Threat modeling

Secure design

AppSec tooling

Cloud security

Cryptography

REST APIs

Containers

CI/CD security

Jira

GitHub

GitLab

SAST/DAST/IAST/SCA

Formation

Bachelor’s degree in Computer Science or Information Security

Outils

Azure

AWS

Docker

Kubernetes

Jira

GitHub

GitLab

SAST

DAST

IAST

SCA

Description du poste

About Delinea: Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to seamlessly govern their interactions across the modern enterprise. Leveraging AI-powered intelligence, Delinea’s leading cloud-native Identity Security Platform applies context throughout the entire identity lifecycle - across cloud and traditional infrastructure, data, SaaS applications, and AI. It is the only platform that enables you to discover all identities - including workforce, IT administrator, developers, and machines - assign appropriate access levels, detect irregularities, and respond to threats in real-time. With deployment in weeks, not months, 90% fewer resources to manage than the nearest competitor, and a 99.995% uptime, Delinea delivers robust security and operational efficiency without compromise. Learn more about Delinea on Delinea.com, LinkedIn, X, and YouTube.

Join our passionate, global team at Delinea and help us make the world a safer and more secure place. Our success is driven by world class product leadership, outstanding engineers, and strategic investment from TPG. We value diversity, innovation, and a culture of respect and fairness. If you're ready to push boundaries and challenge the status quo in security, we want to hear from you.

Principal Product Security Engineer

Delinea’s Cybersecurity organization is seeking an experienced Principal Product Security Engineer to provide technical leadership and execution for an industry-leading Product Security Program. This critical role is expected to be a key player in designing the overall strategy of Delinea’s Product Security Program and will be responsible for performing secure design reviews, threat modeling, and offering consulting services.

The ideal candidate will be highly collaborative, working alongside Enterprise Architecture, Development, DevOps, and Cloud engineering teams, able to balance the right level of security with business objectives, comfortable with driving technical ideas and communicating clearly with technical as well as non-technical audiences, and work to creatively solve complex Product Security related problems. They must be able to discuss application and cloud security, participate in security audits, and aid in responding to customer security inquiries. Additional responsibilities include implementing organizational policies and standards for product and cloud security and partnering with other teams to integrate cloud security best practices.

This role reports to the Sr. Director of Product Security, is based in the US, and is fully remote.

What You’ll Do:

• Provide strong leadership and be a security thought leader across Delinea’s product offerings
• Gain an understanding of current product security program state and partner with the team to define future state and multi-year roadmaps
• Promote strategic direction and influence security architecture adoption in product strategy and roadmap
• Use knowledge of current product security best practices and industry trends to advise on the secure design of Delinea products and services
• Perform end-to-end security architecture reviews and leverage AI capabilities to augment the team’s capabilities and coverage
• Perform Threat Modelling, assess and document product risks and/or application designs.
• Participate in expanding/maturing Delinea’s S-SDLC program
• Stay up to date on the threat landscape, current technologies, security compliance requirements, standards and industry trends in order to help achieve cybersecurity’s goals.
• Work on key areas to develop baseline cloud, container, application, and infrastructure security standards and integrate into the CI/CD pipeline.
• Automate operational activities that are part of maintaining product and cloud security infrastructure
• Respond to and, when appropriate, resolve or escape security incidents
• Provide mentorship and guidance to Product Security team members

What You’ll Bring:

• Bachelor’s degree in Computer Science, Information Security, similar related field, or equivalent experience.
• Twelve (12) years of professional work experience in Cybersecurity with a minimum of seven years in a Product Security role that includes Security Architecture, Threat Modeling, Secure Design, AppSec tooling, etc.
• Well versed in current Product Security threat landscape and industry best practices.
• Experience performing Threat Modeling and Product Security design reviews and incorporating them as part of SSDLC processes
• Experience in the following technologies:
  • Cloud Security
  • Cryptography
  • Secure Design reviews and Threat Modeling
  • SaaS multi-tenant product architecture
  • REST APIs
  • Containers (Docker, Kubernetes, or similar)
  • Integration of Security testing tools into development pipelines
  • Defect tracking (Jira, Bugzilla, ServiceNow, or similar)
  • Source code management (ADO, GitLab, GitHub, or similar)
  • Application security testing tools (SAST, DAST, IAST, SCA, or similar)
• Strong leadership, communication, and interpersonal skills, with the ability to influence stakeholders at all levels of the organization
• Strong analytical skills with the ability to prioritize, manage competing demands, and meet deadlines
• Strong communications skills both verbal & written with the ability to describe technical security issues in plain language

We’d Love to See:

• Experience leveraging AI capabilities to automate and augment Product Security tasks such as Threat Modeling and, Secure Design reviews
• Strong understanding of cybersecurity frameworks, risk management principles, and industry standards (e.g., NIST, ISO 27001, CIS, GDPR)
• Solid understanding of cloud security technologies including container security, serverless security, network and application security, and access management.
• Software engineering and/or development experience
• Cybersecurity certifications (e.g., CISSP, CSSLP, CISM, or similar)
• Proficiency with Azure and AWS

Why work at Delinea?

• We're passionate problem-solvers helping the world's largest organizations protect what matters most: their human and machine identities.
• We invest in people who are smart, self-motivated, and collaborative.
• What we offer in return is meaningful work, a culture of innovation and great career progression.

At Delinea, our core values are STRONG and guide our behaviors and success:

• Spirited - We bring energy and passion to everything we do
• Trust - We act with integrity and deliver on our commitments
• Respect - We listen, value different perspectives, and work as one team
• Ownership - We take initiative and follow through
• Nimble - We adapt quickly in a fast-changing environment
• Global - We embrace diverse people and ideas to drive better outcomes

We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.

We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.

Delinea is an Equal Opportunity and Affluent Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.