Product Security Engineer

– JD Summary

Role: Product Security Engineer 

Job Location: Sunnyvale, CA

Role Focus:
Secure applications and platforms throughout the SDLC, from architecture and design through deployment and production, with strong emphasis on Application Security, Cloud Security, Container Security, DevSecOps, AI-assisted security testing, and threat modeling.

Must-Have Skills

1. 5+ years – Security / Application Security / Product Security Engineering
2. Application Security – Architecture Reviews, Threat Modeling, Vulnerability Assessment
3. Programming – Python, TypeScript or similar modern languages
4. Security Testing – Burp Suite, OWASP ZAP
5. SAST / DAST – Implementation, tuning, automation
6. CI/CD Security / DevSecOps
7. AI-assisted Security Testing – AI for vulnerability discovery, validation, and security automation
8. Container Security – Kubernetes, ephemeral workloads
9. Cloud Security – AWS, Google Cloud Platform, Azure
10. Cloud Security Platforms – Configuration, monitoring, remediation
11. Security Protocols & Encryption
12. Vulnerability Management – Risk-based prioritization and remediation
13. Secure Coding – Developer guidance and security awareness
14. Incident Response – Product/security incident support
15. Platform Migration Security – Legacy systems + modern microservices