Back
Remote mid-level role at a known brand in a metro location increases applicant density and competition.
Requires specialized product security and compliance experience, limiting cross-industry transferability.
Explicit 5+ years, hybrid cloud requirement, and mandatory application security tools/standards enforce strict filters.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Own end-to-end product security by embedding secure-by-design principles and ensuring compliance with security policies, regulations, and industry standards.
Advise and support Product Engineering teams on secure coding, vulnerability management, threat modeling, and secure SDLC adoption including security tooling (SAST, SCA, IAST, CNAPP).
Lead security design reviews, collaborate with architecture and audit teams to ensure product security controls are audit-ready, and provide periodic education and updates on product security topics.
Minimum 5 years in cybersecurity/product security/security architecture with at least 3 years in hybrid cloud environments.
Prior software development or engineering experience is required.
Degree in computer science or technology-related field; Information Security certifications (CISSP, SSCP, CSSLP) preferred but not mandatory.
Willingness and ability to travel up to 15% domestically.
Experienced in applying secure coding practices, threat modeling (STRIDE, PASTA, MAESTRO), and secure SDLC in cloud/web applications with demonstrated remediation advisory skills.
Comfortable engaging senior technology and info security leadership to influence strategic security initiatives and compliance.
Familiar with industry standards/frameworks like OWASP, PCI-DSS, CIS, and NIST and able to champion security culture across product teams and business units.