Product Security Engineer – Remote

About the role

We are seeking a Product Security Engineer to design and implement security controls for a cloud‑native platform. The role focuses on threat modeling, secure development practices, and integrating security throughout the product lifecycle, working remotely with cross‑functional teams.

Key responsibilities

• Develop and maintain security requirements for product features and infrastructure components.
• Conduct threat modeling and risk assessments for new and existing product features.
• Implement and enforce secure coding practices and security testing methodologies.
• Collaborate with engineering teams to design and deploy secure cloud architectures.
• Monitor and respond to security vulnerabilities, coordinating remediation across teams.

Required profile

• Proven experience with secure software development lifecycle (SDLC) practices.
• Ability to produce clear security documentation and guidelines for engineering teams.
• Strong understanding of identity and access management (IAM) and zero‑trust principles.

Required skills

• Threat modeling methodologies and tools.
• Cloud security for AWS, Azure, or GCP.
• Security testing tools such as SAST, DAST and penetration testing.
• Container security with Docker and Kubernetes.
• IAM and zero‑trust concepts.

What we offer

• Competitive compensation ranging from $250K to $400K per year.
• Fully remote work environment.
• Opportunity to work on AI‑powered solutions with a global leader in IT services.