Product Security Engineer, Senior

Role overview

Responsibilities

• Advise engineering teams on security for large-scale cloud initiatives and enterprise application and infrastructure architectures.
• Lead architecture and threat modeling to identify vulnerabilities and develop risk mitigation plans across the SDLC.
• Recommend secure product designs that balance functional goals and security requirements.
• Partner with Product BISOs to prioritize risk-based security initiatives and analyze risk signals and emerging threats.
• Serve as a security contact for engineering partners and leadership and champion secure development practices.

Required qualifications

• 5–8 years in security engineering, security architecture, or security assurance.
• Experience securing products and infrastructure in one or more public cloud environments and understanding cloud service models, shared responsibility, and identity primitives.
• Experience with security design reviews and threat modeling; familiarity with OWASP Top 10 and CWE Top 25.
• Knowledge of OAuth/OIDC, SAML, service authentication, API authorization, TCP/IP, TLS, network segmentation, key management, certificates, secrets, and encryption.
• Strong communication and ability to influence engineering teams without direct authority.

Preferred qualifications

• Ability to reason about abuse cases and attack paths; penetration testing or offensive security experience is beneficial.
• Experience improving secure development lifecycles, security reviews, or security advisory programs.
• Experience analyzing service-portfolio data and recommending root-cause mitigations.
• Code-reading experience in Java, Go, or Python and familiarity with Kubernetes, Docker, service mesh, PKI, CSPM, vulnerability scanning, SAST, or infrastructure-as-code security scanning.

Compensation

• The typical base salary range is $148,500 to $223,900 annually. Select San Francisco and New York City metropolitan areas have a range of $178,900 to $246,000 annually.
• Compensation ranges represent base salary and exclude applicable bonuses, sales incentives, equity, and benefits.

Location

• The posting lists San Francisco, California, or Bellevue, Washington as locations; it does not state a remote or hybrid arrangement.