Staff Product Security Engineer: Secure-by-Design Leader

ServiceTitan; New York (NY); On-site; USD 180,000 - 270,000; Full time

Benefits offered by this job

Flextime

Flexible time off

Medical, dental, vision benefits

Parental leave

Job summary

ServiceTitan is hiring a Staff Product Security Engineer to embed with an engineering portfolio and own security outcomes end to end, covering application and cloud security. You will sit with engineering leaders to shape designs, model threats, and turn security requirements into concrete architecture decisions that enable velocity without compromise.

You will lead threat modeling at scale, provide secure design guidance for cloud-native services, and maintain portfolio risk across findings,

Qualifications

• 7-10+ years in product security, application security, cloud security, or related role with strong software engineering foundation.
• Demonstrated ability to work across the full stack of a modern SaaS product: secure code review, threat modeling, secure design, CI/CD and supply chain security, cloud identity and least privilege, IaC security, container and Kubernetes security, and cloud posture management.
• Proficiency reading and writing code in C#/.NET (preferred), Go, Java, or Python; hands-on experience with Azure and/or AWS security services and IaC tooling (Terraform, Bicep).
• Track record of leading threat modeling and architecture review at scale.
• Influence with engineering leaders to drive priorities and manage risk.
• Automation mindset; comfortable scripting and AI-assisted tooling to scale work.

Responsibilities

• Embed with engineering portfolios to own security outcomes end to end.
• Lead threat modeling across the portfolio and translate findings into requirements.
• Provide secure architecture guidance for cloud-native services and data access patterns.
• Own portfolio risk view across findings, cloud posture, identity, and data exposure.
• Set remediation priorities with portfolio leaders and track SLA adherence.
• Guide risk acceptance processes with time-bound, visible exceptions.
• Champion adoption of SAST, SCA, IaC, container, and CSPM tooling.
• Remediate with engineers, write reference fixes to unblock squads.
• Develop security champions across squads and deliver just-in-time training.

Skills

Product security

Threat modeling

Cloud security

Security architecture

C#/.NET

Go

Java

Python

Azure

AWS

Tools

Terraform

Bicep

Job description

ServiceTitan is hiring a Staff Product Security Engineer to embed with an engineering portfolio and own security outcomes end to end, covering application and cloud security. You will sit with engineering leaders to shape designs, model threats, and turn security requirements into concrete architecture decisions that enable velocity without compromise.

You will lead threat modeling at scale, provide secure design guidance for cloud-native services, and maintain portfolio risk across findings,