Staff Product Security Engineer — Lead Secure SDLC & AI

Medallia; McLean (VA); Hybrid; USD 154,000 - 205,000; Full time

Job summary

Medallia is seeking a Staff Product Security Engineer to help drive security across our products and platforms. You will lead complex security initiatives and mentor other security engineers while partnering with Engineering, Product, Architecture, Privacy and Compliance.

The role emphasizes hands-on security, SDLC integration, and scalable security patterns with a hybrid onsite component in the Tysons Corner area.

Qualifications

• 8+ years in application or product security or related fields.
• Hands-on with API, cloud, and secure architecture reviews.
• Experience securing modern architectures including microservices and containers.
• Knowledge of OWASP risks and best practices.

Responsibilities

• Lead security reviews for complex products, features, services, and architectures.
• Perform threat modeling and identify security risks early in the development lifecycle.
• Partner with engineering to design practical mitigations and secure patterns.
• Provide guidance on application, API, cloud, and AI security.
• Drive security automation and embed controls into developer workflows.

Skills

Application Security

SSDLC

Threat Modeling

Security Architecture Reviews

Vulnerability Management

Secure Coding Practices

Kubernetes

Cloud Security

AWS

OWASP

Investigate Complex Issues

Tools

SAST

SCA

Secrets Detection

DAST

Container Security

ASPM platforms

AI-assisted security reviews

Job description

Medallia is seeking a Staff Product Security Engineer to help drive security across our products and platforms. You will lead complex security initiatives and mentor other security engineers while partnering with Engineering, Product, Architecture, Privacy and Compliance.

The role emphasizes hands-on security, SDLC integration, and scalable security patterns with a hybrid onsite component in the Tysons Corner area.