Requirements

You bring significant (5+ years) experience in Product Security, Application Security, or Security Engineering within a modern software environment.
You have strong experience in security architecture and threat modelling, with a proven ability to turn risk into practical engineering solutions.
You possess deep technical knowledge of application and API security, secure development practices, modern software architectures, and cloud-native systems.
You bring experience embedding security controls into engineering workflows, software supply chains (SBOMs), and the broader software development lifecycle.
You are an excellent communicator who builds trust and influences engineers, architects, and senior technical leaders without relying on direct authority.
You have experience with, or a strong interest in, AI security and leveraging AI tools to advance security engineering.

What sets you apart.

You have hands-on experience with Infrastructure as Code (IaC) security, scaling Security Champions programs, or managing Bug Bounty programs.
You hold relevant industry or cloud security certifications (e.g., CISSP, CSSLP, AWS Security Specialty), though we care far more about your practical impact than the certificates you hold.

Principal Product Security Engineer

Summary