Sr. Product Security Engineer, Software Assurance - Remote | WFH

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It Recruit - Information Technology, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Sr. Product Security Engineer, Software Assurance at Get It Recruit - Information Technology is responsible for developing and implementing security processes and protocols to ensure the integrity of our software products. This role encompasses conducting security assessments, identifying potential vulnerabilities, and collaborating with cross-functional teams to integrate security practices throughout the software development lifecycle. Additionally, the engineer will lead initiatives to promote security awareness and ensure compliance with industry standards, ultimately safeguarding the product against threats and vulnerabilities.

Job Responsibilities

• Conduct comprehensive security assessments and penetration tests on software products.
• Identify, document, and communicate security risks and vulnerabilities found in the software.
• Collaborate with software development teams to integrate security controls and best practices into the development lifecycle.
• Design and implement threat modeling exercises to understand potential attack vectors.
• Ensure compliance with relevant security regulations and industry standards.
• Provide guidance and training to development teams on security principles and secure coding practices.
• Stay updated on the latest security trends, threats, and vulnerabilities affecting the software industry.
• Lead security architecture discussions and contribute to the development of security policies and procedures.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 5+ years of experience in software security engineering or a related field.
• Strong knowledge of application security principles and secure software development practices.
• Proficiency with security assessment tools such as static and dynamic analysis tools.
• Experience with threat modeling and risk assessment methodologies.
• Familiarity with regulatory requirements and standards such as OWASP, NIST, and ISO/IEC 27001.
• Strong analytical and problem-solving skills with a detail-oriented mindset.
• Excellent communication skills, both verbal and written, with the ability to convey technical information to non-technical stakeholders.

Technologies & Tools

The Sr. Product Security Engineer will utilize a variety of technologies and tools to perform security assessments and enhance the security posture of software products. Key tools include static and dynamic application security testing (SAST/DAST) solutions, container security tools, vulnerability management systems, and threat modeling frameworks. Familiarity with programming languages such as Java, .NET, or Python, as well as knowledge of secure coding practices and cloud security architectures, is essential.

Ideal Candidates

The ideal candidate for the Sr. Product Security Engineer role is someone who possesses a strong technical foundation combined with a proactive approach to software security. They should demonstrate a passion for identifying vulnerabilities, a commitment to continuous improvement, and the ability to work collaboratively within diverse teams. Successful candidates will exhibit excellent problem-solving skills, a willingness to embrace new technologies, and an unwavering dedication to securing the organization’s software products against evolving threats.