Staff Product Security Engineer - End-to-End Security Leader

ServiceTitan, Inc.; California; Hybrid; USD 168,000 - 270,000; Full time

Benefits offered by this job

Flexible time off

Wellness benefits

Parental leave

Equity and bonuses

One Medical membership

Job summary

ServiceTitan, Inc. seeks a Staff Product Security Engineer to embed with an engineering portfolio and own security outcomes end to end.

You will lead threat modeling, secure-by-default designs, and secure architecture across cloud-native services and multi-tenant data access. You’ll partner with VP-level engineering leaders to set remediation priorities, drive security across CI/CD, IaC, and AI-enabled features, and coach security champions across squads to scale impact across a large SaaS

Qualifications

• 7-10+ years in product security, application security or cloud security
• Strong software engineering foundation with partner engineering
• Breadth across AppSec and CloudSec: secure code review, threat modeling, secure design, CI/CD and supply chain security
• Proficiency reading/writing code in C#/.NET (preferred), Go, Java, or Python

Responsibilities

• Lead threat modeling across the portfolio
• Provide secure architecture guidance for cloud-native services
• Own the portfolio's security risk picture across app, cloud, identity and data exposure
• Drive remediation priorities with engineering leaders and ensure timely fixes
• Champion secure-by-default patterns and paved-road adoption across squads

Skills

Threat modelling

Secure design

Architecture review

CI/CD security

Cloud security

AppSec

Kubernetes security

Terraform

IaC tooling

Azure/AWS

Tools

Terraform

Bicep

Kubernetes

Azure

AWS

CI/CD pipelines

Job description

ServiceTitan, Inc. seeks a Staff Product Security Engineer to embed with an engineering portfolio and own security outcomes end to end.

You will lead threat modeling, secure-by-default designs, and secure architecture across cloud-native services and multi-tenant data access. You’ll partner with VP-level engineering leaders to set remediation priorities, drive security across CI/CD, IaC, and AI-enabled features, and coach security champions across squads to scale impact across a large SaaS