Staff Security Engineer

Cybersecurity Jobs; Redwood City (CA); Remote; USD 170,000 - 200,000; Full time

Benefits offered by this job

Competitive salary

Bonus program

Healthcare

Pension matching

Life insurance

Employee assistance program

Paid time off

Company holidays

Excellent benefits

Job summary

Delinea is seeking an experienced Principal/Staff-level Product Security Engineer to lead our Product Security Program strategy and execution from Redwood City, CA with remote flexibility. You will drive security architecture decisions, threat modeling, and secure design across Delinea products and services.

You will mentor the Product Security team, define multi-year roadmaps, and collaborate with cross-functional teams to advance CI/CD security, incident response, and security audits.

Qualifications

• Bachelors degree in Computer Science or related field; equivalent experience acceptable
• 12 years of professional work experience in cybersecurity
• 7+ years in a Product Security role including Security Architecture, Threat Modeling, Secure Design, AppSec tooling
• Strong knowledge of the current Product Security threat landscape and industry best practices
• Experience performing Threat Modeling and Product Security design reviews integrated into SSDLC processes
• Experience with Cloud Security
• Experience with Cryptography
• Experience with Secure Design reviews and Threat Modeling
• Experience with SaaS multi-tenant product architecture
• Experience with REST APIs
• Experience with Containers (Docker, Kubernetes)
• Experience integrating security testing tools into development pipelines
• Experience with defect tracking (Jira, Bugzilla, ServiceNow, or similar)
• Experience with source code management (ADO, GitLab, GitHub, or similar)
• Experience with application security testing tools (SAST, DAST, IAST, SCA, or similar)
• Strong leadership, communication, and interpersonal skills; able to influence stakeholders at all levels
• Strong analytical skills to prioritize, manage competing demands, and meet deadlines
• Strong verbal and written communication skills, including explaining technical security issues in plain language

Responsibilities

• Provide leadership and security thought leadership across Delinea product offerings
• Assess current product security program state and define future state and roadmaps
• Drive strategic security direction and influence security architecture in product strategy
• Advise on secure design for Delinea products and services using best practices
• Conduct end-to-end security architecture reviews and leverage AI to augment coverage
• Perform threat modeling and assess/document product risks and designs
• Participate in expanding and maturing the S-SDLC program
• Stay current on threat landscape and standards
• Develop baseline cloud, container, application, and infrastructure security standards and integrate into CI/CD
• Automate operational activities maintaining product and cloud security infrastructure
• Respond to security incidents and escalate/resolution as needed
• Mentor and guide Product Security team members
• Implement organizational policies for product and cloud security
• Partner with other teams to implement security best practices
• Participate in security audits and respond to customer inquiries

Skills

Product Security

Threat Modeling

SSDLC

Cloud Security

Cryptography

REST APIs

Containers

CI/CD

SAST

DAST

IAST

SCA

Leadership

Communication

Analytical Skills

Education

Bachelor’s degree in Computer Science or related field

Tools

Azure

AWS

Docker

Kubernetes

Jira

Bugzilla

ServiceNow

ADO

GitLab

GitHub

SAST

DAST

IAST

SCA

Job description

Delinea is seeking an experienced Principal/Staff-level Product Security Engineer to lead Product Security Program strategy and execution.

Responsibilities

• Provide strong leadership and serve as a security thought leader across Delinea product offerings
• Assess the current product security program state and partner to define future state and multi-year roadmaps
• Drive strategic security direction and influence security architecture adoption in product strategy and roadmap
• Advise on secure design for Delinea products and services using product security best practices and industry trends
• Conduct end-to-end security architecture reviews and leverage AI capabilities to augment team coverage
• Perform threat modeling and assess/document product risks and application designs
• Participate in expanding and maturing the S-SDLC program
• Stay current on the threat landscape, technologies, security compliance requirements, standards, and industry trends
• Develop baseline cloud, container, application, and infrastructure security standards and integrate them into CI/CD
• Automate operational activities that maintain product and cloud security infrastructure
• Respond to security incidents and, when appropriate, resolve or escalation
• Mentor and guide Product Security team members
• Implement organizational policies and standards for product and cloud security
• Partner with other teams to integrate cloud security best practices
• Participate in security audits, discuss application and cloud security, and support responses to customer security inquiries

Requirements

• Bachelor’s degree in Computer Science, Information Security, or similar related field (or equivalent experience)
• 12 years of professional work experience in cybersecurity
• 7+ years in a Product Security role including Security Architecture, Threat Modeling, Secure Design, AppSec tooling, and related work
• Strong knowledge of the current Product Security threat landscape and industry best practices
• Experience performing Threat Modeling and Product Security design reviews, integrated into SSDLC processes
• Experience with Cloud Security
• Experience with Cryptography
• Experience with Secure Design reviews and Threat Modeling
• Experience with SaaS multi-tenant product architecture
• Experience with REST APIs
• Experience with Containers (Docker, Kubernetes, or similar)
• Experience integrating security testing tools into development pipelines
• Experience with defect tracking (Jira, Bugzilla, ServiceNow, or similar)
• Experience with source code management (ADO, GitLab, GitHub, or similar)
• Experience with application security testing tools (SAST, DAST, IAST, SCA, or similar)
• Strong leadership, communication, and interpersonal skills; able to influence stakeholders at all levels
• Strong analytical skills to prioritize, manage competing demands, and meet deadlines
• Strong verbal and written communication skills, including explaining technical security issues in plain language

Technologies

• Cloud Security
• Cryptography
• SaaS multi-tenant product architecture
• REST APIs
• Docker
• Kubernetes
• Jira
• Bugzilla
• ServiceNow
• ADO
• GitLab
• GitHub
• SAST
• DAST
• IAST
• SCA
• CI/CD
• S-SDLC
• SSDLC
• Azure
• AWS

Benefits

• Competitive salaries
• Meaningful bonus program
• Healthcare insurance
• Pension/retirement matching
• Comprehensive life insurance
• Employee assistance program
• Time off plans
• Paid company holidays
• Excellent benefits

We’d Love to See

• Experience leveraging AI capabilities to automate and augment Product Security tasks such as Threat Modeling and Secure Design reviews
• Strong understanding of cybersecurity frameworks, risk management principles, and industry standards (e.g., NIST, ISO 27001, CIS, GDPR)
• Solid understanding of cloud security technologies including container security, serverless security, network and application security, and access management
• Software engineering and/or development experience
• Cybersecurity certifications (e.g., CISSP, CSSLP, CISM, or similar)
• Proficiency with Azure and AWS

Location and Compensation

• Location: Redwood City, CA (remote)
• Salary: USD 170,000 - 200,000 per year

Company Context

• Core focus on protecting human and machine identities
• Emphasis on smart, self-motivated, collaborative people and meaningful work

Core Values

• Spirited
• Trust
• Respect
• Ownership
• Nimble
• Global