Note: The job is a remote job and is open to candidates in USA. Mosaic Clinical Technologies is pioneering a new imaging paradigm with its AI-native platform, MosaicOS™, designed to enhance clinical care. The Product Security Engineer will lead application security initiatives and collaborate with various teams to embed security practices throughout the development lifecycle.
Responsibilities
- Lead application security testing initiatives, including SAST, DAST, SCA, IaC, container security, and penetration testing across cloud-native environments
- Integrate and optimize security tooling, monitoring, policy enforcement, and ASPM capabilities throughout CI/CD pipelines and development workflows
- Conduct security reviews, threat modeling, architecture assessments, and risk analyses for applications, APIs, cloud platforms, and deployment environments
- Partner with engineering, platform, and DevOps teams to embed security controls and secure-by-default practices throughout the Secure SDLC
- Identify security vulnerabilities and risks across code, infrastructure, cloud environments, and third-party dependencies, providing remediation guidance and support
- Define and implement security policies, standards, controls, governance frameworks, and measurable security metrics to strengthen product security programs
- Serve as a product security subject matter expert, collaborating cross-functionally with engineering, product, compliance, legal, sales, and customer-facing teams to support security reviews, customer inquiries, and due diligence activities
Skills
- 5+ years of experience in Application Security, Product Security, DevSecOps, Cloud Security, or related cybersecurity roles
- Strong understanding of Secure SDLC principles and secure software engineering practices, microservices, APIs, containers, Kubernetes, and CI/CD pipelines
- Experience securing cloud-native environments such as AWS, Azure, or GCP
- Hands-on experience with modern application security tooling including: SAST, DAST, Software Composition Analysis (SCA), Container security scanning, Infrastructure-as-Code (IaC) scanning, CI/CD security integrations
- Lead application security testing initiatives, including SAST, DAST, SCA, IaC, container security, and penetration testing across cloud-native environments
- Integrate and optimize security tooling, monitoring, policy enforcement, and ASPM capabilities throughout CI/CD pipelines and development workflows
- Conduct security reviews, threat modeling, architecture assessments, and risk analyses for applications, APIs, cloud platforms, and deployment environments
- Partner with engineering, platform, and DevOps teams to embed security controls and secure-by-default practices throughout the Secure SDLC
- Identify security vulnerabilities and risks across code, infrastructure, cloud environments, and third-party dependencies, providing remediation guidance and support
- Define and implement security policies, standards, controls, governance frameworks, and measurable security metrics to strengthen product security programs
- Serve as a product security subject matter expert, collaborating cross-functionally with engineering, product, compliance, legal, sales, and customer-facing teams to support security reviews, customer inquiries, and due diligence activities
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field, or equivalent practical experience preferred
- One of the following certifications, or equivalent: CISSP, CCSP, CASE is highly preferred
- Familiarity with industry frameworks and standards such as: OWASP, SAMM, NIST SSDF, ISO 27001, SOC 2, CIS Benchmarks
Benefits
- Eligibility starts the month after hire, with tiered options to choose from.
- Compensation Reviews, Career Growth Opportunities
- Flexible Remote Schedules
- Generous PTO Plans and Paid Holidays
- Proudly Certified as a Great Place to Work for Five Consecutive Years
- An annual discretionary bonus.
- Health & wellness coverage options
- 401k benefits
- Family planning
- Telehealth
- All benefits are subject to eligibility requirements.
Company Overview