Principal Product Security Engineer

Responsibilities

• Shape product security strategy
• Define and evolve security guardrails for AI-assisted development from design and coding through testing, review, deployment and operations so teams can move quickly while using AI responsibly.
• Lead large‐scale security initiatives
• Own cross‐functional programs (e.g., secure SDLC improvements, vulnerability reduction) that span multiple teams and quarters.
• Accelerate vulnerability remediation and automation
• Partner with engineering to build automation for vulnerability detection, triage, and remediation (including STIGs/CIS baselines and policy‐as‐code), shortening time‐to‐fix for critical issues.
• Evolve security assurance programs
• Improve how we run and consume pentests, vulnerability assessments, bug bounty programs, and red‐team activity so findings become lasting engineering and process changes.
• Champion secure‐by‐default tooling
• Guide adoption and integration of security tools (static/dynamic analysis, dependency and license checks, IaC scanners) into CI/CD in a way that works with, not against, developer workflows.

Languages