Overview of the role
The Product Security Engineer role centers on hands-on static analysis triage rather than security architecture, DevSecOps pipeline ownership, or vulnerability program management. This is an opportunity to apply deep static analysis expertise in a high-accountability environment where the quality of triage directly shapes how risk is understood and remediated across the product.
Key responsibilities
- Performing hands-on SAST triage as the primary daily activity, not a secondary responsibility.
- Conducting source-to-sink analysis and secure code review across real codebases.
- Dispositioning findings with evidence-based documentation in a regulated environment.
- Tuning static analysis tools and managing false positive rates across the product portfolio.
- Partnering with engineering teams to validate and drive remediation of confirmed vulnerabilities.
Requirements
- Product Security: 5+ years of hands-on experience in product security, application security, or software engineering with a security focus.
- SAST Triage:
Proven track record beyond tool integration or pipeline configuration.
- Code Analysis: Strong source-to-sink data flow analysis and secure code review skills.
- SAST Tools: Experience operating tools such as Checkmarx, Fortify, Veracode, or Coverity at the findings level.
- Documentation: Ability to produce audit-traceable documentation of finding dispositions in compliance-driven environments.
- Language Proficiency: Advanced level of English.
Benefits:
- Flexibility: Choose where and how you work for enhanced creativity and innovation.
- Tailored Compensation: Personalize your earnings to suit your financial goals.
- Tech-Driven Tools: Access cutting-edge resources for seamless collaboration and productivity.
- Autonomous Workflow: Take control of your schedule to achieve work-life balance.
- Well-being: Enjoy generous leave policies for rest and rejuvenation.
- Diversity & Inclusion: Thrive in a diverse and inclusive enviro