Sr. Product Security Engineer, Software Assurance - Remote

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It Recruit - Information Technology, so some details may not match this job. The employer's own page has the real description.

Position Overview

The Senior Product Security Engineer, Software Assurance at Get It Recruit - Information Technology will play a pivotal role in ensuring the security and integrity of software products across the organization. In this remote position, the individual will be responsible for implementing security practices throughout the software development lifecycle, conducting risk assessments, identifying vulnerabilities, and collaborating with cross-functional teams to mitigate risks. The ideal candidate will possess a strong understanding of security principles, along with the ability to drive security initiatives and influence software development practices to enhance overall product security.

Job Responsibilities

• Implement security best practices within the software development lifecycle.
• Conduct comprehensive risk assessments and vulnerability analyses on software products.
• Collaborate with development, QA, and operations teams to integrate security into CI/CD pipelines.
• Lead threat modeling sessions to identify potential security threats and mitigation strategies.
• Develop and maintain security documentation and reports related to software assurance.
• Advise and train team members on security risks and best practices for secure coding.
• Stay informed on the latest security trends and threats, applying knowledge to advance security initiatives.
• Respond to security incidents and participate in the forensic analysis as needed.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 5+ years of experience in software security engineering or a related field.
• Strong knowledge of security principles, application architecture, and secure coding practices.
• Experience with programming languages such as Python, Java, or C#.
• Familiarity with security frameworks (e.g., OWASP, NIST) and compliance standards (e.g., PCI-DSS, GDPR).
• Proficiency in using security analysis tools and techniques.
• Excellent analytical, problem-solving, and communication skills.

Technologies & Tools

The position utilizes a range of technologies and tools, including but not limited to security scanning tools (e.g., Snyk, Veracode), CI/CD tools (e.g., Jenkins, GitLab CI), cloud platforms (e.g., AWS, Azure), and programming languages relevant to the software development lifecycle. Familiarity with infrastructure as code (IaC) tools, such as Terraform or Ansible, is also beneficial.

Ideal Candidates

The ideal candidates for this position are proactive security advocates with a strong commitment to improving software security practices. They possess excellent communication skills, allowing them to effectively engage with technical and non-technical stakeholders alike. A successful candidate is detail-oriented, analytical, and has a genuine passion for cybersecurity. They thrive in collaborative environments and demonstrate problem-solving abilities, enabling them to devise and implement effective security solutions.