Security Engineer (Product)

Conteúdo da vaga extraído em seções para revisão mais rápida.

Partner with Engineering to build security into the software development lifecycle, including threat modeling, secure design reviews, and security requirements.
Triage findings from application security tooling, then guide remediation through clear priorities and practical fixes.
Define and maintain secure-by-default patterns for developers, including libraries, templates, and CI checks.
Improve supply chain security across build and release workflows, including signing, provenance, and policy enforcement.
Help teams ship secure changes quickly by making security guidance clear, repeatable, and easy to use.

3+ years of professional experience in product security, application security, or a similar engineering security role.
Strong application security fundamentals and familiarity with common vulnerability classes.
Hands-on experience securing CI/CD workflows, such as GitHub Actions, GitLab CI, or similar systems.
Familiarity with modern security tooling, including SAST, SCA, dependency scanning, and secret scanning.
Ability to collaborate effectively with engineers, explain tradeoffs clearly, and move secure changes through delivery.

(Tacos? If you need an ice-breaker, ask how we say thanks by giving tacos!)
Experience using AI tools to improve security workflows, developer productivity, or engineering velocity.
Ability to program in a general-purpose language, especially Go or Python.

Ashby helps us review inbound applications by surfacing candidates who best match the role requirements we've defined. This tool does not make hiring decisions - it helps our team prioritize which applications to review first.
Granola takes notes during our interview calls so our team can focus on the conversation with you.

Vagas similares