Product Security Engineer

Duties

• Act as the technical security point-of-contact when partnering directly with engineering product teams
• Strategically prioritize the risk reduction of vulnerabilities
• Drive vulnerabilities to remediation within SLA
• Own metrics and escalations, such as Time-To-Remediation and SLA adherence, to ensure visibility of engineering product team's risk posture
• Identify and implement strategic improvements and paved road solutions to improve resilience

Skills

• Vulnerability Management / Triage
• Vulnerability Risk Assessment
• Vulnerability Incident Response
• Knowledge of application security vulnerabilities (OWASP Top 10) and mitigation techniques
• Knowledge of infrastructure vulnerabilities, mitigation techniques, and tooling (e.g. Spotlight, Crowdstrike, Rapid7 Nexpose)
• Dependability: Meets commitments, works independently, accepts accountability, handles change, sets personal standards, stays focused under pressure
• Strong understanding of common security concepts that support root-cause analysis to make data-driven decisions on vulnerability patterns and trends

Benefits

• Health Insurance: Medical, dental, and vision coverage
• Retail Plans: Participation in a company-sponsored retirement savings plan.
• Legal Service Plans: Offering access to attorneys for legal advice and representation.