Senior Product Security Engineer

Requisitos

• Proven experience in Product Security or Application Security with a demonstrated impact on improving product security
• Strong hands-on penetration testing experience for web applications and APIs
• Deep understanding of modern web application architecture, including SPAs, APIs, authentication and authorization (OAuth 2.0/OpenID Connect), session management, and common attack vectors such as t.
• Experience conducting security architecture reviews and threat modeling
• Strong knowledge of secure software development practices and integrating security throughout the SDLC
• Experience performing secure code reviews and establishing secure coding standards
• Hands-on experience operating and tuning SAST, DAST, and dependency/supply chain security scanning tools
• Ability to triage security findings and translate them into actionable remediation plans
• Excellent communication skills with the ability to collaborate effectively with software engineers and explain security risks in practical terms
• Experience supporting security compliance initiatives such as SOC 2, ISO 27001, or similar frameworks

Desejáveis

• Experience with open-source security tools such as OWASP ZAP, Burp Suite Community Edition, Semgrep, Trivy, Grype, or Nuclei
• Offensive security certifications such as OSCP
• Cloud security experience across AWS, Azure, or Google Cloud Platform
• Experience securing containerized environments and Kubernetes
• Background working in enterprise or highly regulated environments
• Experience improving developer security education and fostering secure engineering practices