Back
Senior, niche product security role reduces applicant density despite metro location.
Highly domain-specific product and application security experience required, limiting transferability across non-security roles.
Requires demonstrable hands-on application and API security expertise, identity and cloud experience, and assessment skills.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Lead security assessments of cloud-hosted applications and APIs, focusing on understanding business logic, threat models, and architecture.
Collaborate directly with engineering and product teams to drive risk-based decisions and validate control effectiveness.
Contribute to security standards, assessment methodologies, tooling, and support product security incident response as needed.
Demonstrated hands-on experience owning product or application security assessments for cloud-hosted applications and APIs.
Strong knowledge of web application and API security vulnerabilities including OWASP Top 10 and API Security Top 10.
Experience assessing OAuth2/OIDC, SAML, JWT identity and access control implementations at design and implementation levels.
Bachelor's degree in Computer Science, Engineering, Information Security, or equivalent practical experience.
Experienced individual contributor who has led security engagements and advised product teams in risk-based security decisions.
Skilled in threat modeling, architecture review, and working within cloud, microservices, and containerized environments.
Experience or strong interest in emerging AI-enabled product security and ability to automate and extend security assessments with scripting or tool development.