- Lead security reviews of architecture, code, and security-sensitive changes
- Evaluate risks in AI-powered products, including prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and sandbox escapes
- Threat model new capabilities by identifying trust boundaries, abuse cases, and high-impact failure modes
- Translate findings into practical, prioritized mitigations
- Investigate suspected vulnerabilities and develop proofs of concept
- Assess exploitability and impact and partner with engineers through remediation
- Develop secure defaults, approved patterns, reusable controls, review requirements, and automated checks
- Pair with engineers and document practical security guidance
- Help product teams develop durable security expertise
- Explain technical findings, business impact, and remediation options to engineers, product leaders, and executives
Requirements
- Strong software engineering fundamentals and ability to independently understand, test, and contribute fixes to production codebases
- Proficiency in at least one of Python, Go, or TypeScript
- Experience leading security reviews or threat models for complex production systems
- Understanding of injection, authorization flaws, IDOR, SSRF, unsafe deserialization, race conditions, cryptographic misuse, and software supply-chain risks
- Understanding of web applications, APIs, OAuth/OIDC, cloud platforms, containers, Kubernetes, and CI/CD systems
- Ability to reason about untrusted input, authorization, isolation, identity, delegation, and data boundaries
- Experience driving security improvements involving multiple engineering teams
- Clear communication with technical and non-technical audiences
- Experience with SAST, DAST, SCA, custom linters, or policy-as-code (nice to have)
- Experience securing multi-tenant SaaS, enterprise software, or systems processing sensitive customer data (nice to have)
- Offensive security experience through penetration testing, red teaming, or security research (nice to have)
- Experience with vulnerability disclosure or bug bounty programs (nice to have)
- Open-source security contributions, published research, conference talks, or credited vulnerability discoveries (nice to have)
Core Competencies
Demonstrates expertise in leading security reviews and threat modeling for complex production systems, with a strong foundation in software engineering and proficiency in Python, Go, or TypeScript. Capable of translating technical findings into actionable mitigations while effectively communicating with both technical and non-technical stakeholders.
Highest-signal resume keywords
- Security Review Leadership
- Threat Modeling
- Python Proficiency
- Web Application Security
- Vulnerability Assessment
ATS Optimization Keywords
Hard Skills
- Software Engineering Fundamentals
- Threat Modeling
- Injection Flaws Understanding
- Authorization Flaws Understanding
- Cryptographic Misuse Understanding
- SAST
- DAST
- CI/CD Systems
- Penetration Testing
- Vulnerability Disclosure
Soft Skills
- Clear Communication
- Collaboration
Industry Keywords
- Multi-Tenant SaaS
- Enterprise Software
- Security Research
- Bug Bounty Programs
- Open-Source Security Contributions
Tools & Technologies
- Kubernetes
- Cloud Platforms
- APIs
- OAuth/OIDC
- Containers
#J-18808-Ljbffr
Product Security Engineer Arbeitgeber: Jobtailor
Als Front Office Supervisor in unserem dynamischen Team bieten wir Ihnen die Möglichkeit, in einem unterstützenden und freundlichen Arbeitsumfeld zu wachsen. Wir legen großen Wert auf die berufliche Entwicklung unserer Mitarbeiter und bieten regelmäßige Schulungen sowie die Chance, Verantwortung zu übernehmen. Unsere Lage ermöglicht es Ihnen, Teil einer lebendigen Gemeinschaft zu sein, während Sie gleichzeitig die Standards unseres Franchise-Partners einhalten und unseren Gästen einen unvergesslichen Aufenthalt bieten.
