Senior Product Security Engineer

Responsibilities

• Design and develop product security APIs, tools, and utilities for internal and external stakeholders.
• Conduct threat modeling and secure design reviews for application backend services and business integrations.
• Perform advanced penetration tests and adversarial attack simulations against Harness modules, APIs, and codebase using industry-standard frameworks.
• Lead manual and automated code review efforts to discover vulnerabilities, weaknesses, and anti-patterns in the Harness platform.
• Implement and operate security tooling including SAST, DAST, and SCA, and integrate these into CI/CD pipelines.
• Consult and advise developers and Product Managers on security standards, vulnerability remediation, and security architecture.
• Assess risks and trade-offs, and propose solutions for product security features such as authentication and authorization.
• Participate in the creation, review, and implementation of technical security standards across global engineering teams.
• Use the Harness platform to integrate security processes like vulnerability management into the SDLC.
• Collaborate cross-functionally with Engineering and Product to accelerate the release of software with security by design.

Languages