Product Security Engineer (Remote)

About the role

We are seeking a Product Security Engineer to design and implement security controls for a cloud‑native platform. The role is fully remote and involves integrating security throughout the product lifecycle.

Key responsibilities

• Develop and maintain security requirements for product features and infrastructure.
• Conduct threat modeling and risk assessments for new and existing features.
• Implement and enforce secure coding practices and security testing methodologies.
• Collaborate with engineering teams to design and deploy secure cloud architectures.
• Monitor and respond to security vulnerabilities, coordinating remediation across teams.

Required profile

• Experience with secure software development lifecycle (SDLC) practices.
• Proficiency in threat modeling methodologies and tools.
• Knowledge of cloud security principles for AWS, Azure, or GCP.
• Familiarity with security testing tools such as SAST, DAST, and penetration testing.
• Experience with container security (Docker, Kubernetes).
• Strong understanding of IAM and zero‑trust principles.

Required skills

• Threat modeling
• Secure SDLC
• AWS, Azure, or GCP
• SAST, DAST
• Penetration testing
• Docker
• Kubernetes
• Identity and Access Management (IAM)
• Zero‑trust architecture