Note: The job is a remote job and is open to candidates in USA. enableIT is seeking a Senior Product Security Engineer to ensure the security of products and services throughout their lifecycle. The role focuses on embedding security into the software development lifecycle, strengthening application security processes, managing vulnerabilities and incident response, and partnering with Engineering, Product, and Platform teams to protect customer data.
Responsibilities
- Support the development and execution of a comprehensive product security strategy aligned with company goals and risk appetite
- Foster a culture of security awareness and ownership across Engineering and Product teams
- Integrate security best practices and automated tooling throughout the SDLC, from design and threat modeling through testing and deployment
- Establish and enforce secure development standards, including API security, secure coding practices, IaC security, and related best practices
- Oversee application security activities including SAST, DAST, SCA, IAST, runtime scanning, and manual penetration testing
- Partner with Engineering, Product, and Platform teams to prioritize and remediate security vulnerabilities efficiently
- Establish and manage mature incident response processes for product-related security events and vulnerabilities
- Partner with engineering teams to enhance product security features
- Stay current with emerging threats, vulnerabilities, tools, and industry best practices to continuously improve security controls and processes
Skills
- 6–8+ years of experience in Product Security, Application Security, DevSecOps, or a related security engineering discipline
- Deep technical knowledge of web and mobile application security, common vulnerabilities, OWASP Top 10, and secure coding practices
- Deep technical knowledge of CI/CD pipelines and relevant tooling for web and mobile applications
- End-to-end experience implementing and managing Product Security tools and processes, including API Security, Mobile Protection, SAST, runtime scanning, or similar tooling
- Hands-on experience with security tools for SAST, DAST, IAST, and penetration testing
- Strong understanding of cloud security principles in AWS environments
- Experience partnering with Engineering, Product, and Platform teams to prioritize, explain, remediate, and retest security vulnerabilities
- Excellent communication skills with the ability to explain complex security concepts to both technical and non-technical audiences
- Comfortable working in a fast-paced environment
- Experience with security tools such as Burp Suite, Metasploit, Kali Linux, Postman, or similar
- Background in financial services, fintech, or highly regulated industries
- Hands-on certifications such as OSCP, Certified Ethical Hacker, SANS/GIAC, or similar
- Demonstrated code projects, GitHub, public code samples, or public security work
Benefits
- Health insurance
- Health savings account
- Dental insurance
- Vision insurance
- Flexible spending accounts
- Life insurance
- Retirement plan
Company Overview
Company H1B Sponsorship