Product Security Engineer (US)

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Product Security Engineer in United States.

As a Product Security Engineer, you will be instrumental in ensuring the security and integrity of products throughout their lifecycle. You will collaborate closely with firmware and software teams to design and implement secure development practices, conduct vulnerability assessments, and automate security testing. This role offers a blend of hands-on technical work and strategic influence, allowing you to shape secure product design and development practices. You will contribute to threat modeling, manual and automated security testing, and the definition of security metrics and processes. The position provides an opportunity to work in a fast-paced, security-focused environment, engaging with cross-functional teams and driving initiatives that protect users and maintain trust. A proactive mindset, strong technical skills, and a passion for security are essential to succeed in this role.

Accountabilities:

• Define and advocate for secure-by-design and secure-by-default principles across products.
• Conduct design reviews, manual assessments, and vulnerability testing to identify and remediate security risks.
• Implement automation to detect and prevent security flaws throughout the development lifecycle.
• Lead training, awareness sessions, and mentorship to promote security best practices.
• Develop and track metrics to measure the impact of security initiatives.
• Influence processes and policies to enhance the security of products and services.
• Identify and propose innovative uses of technology to strengthen product security.
• Occasionally travel to company offices up to twice per year to collaborate with global teams.

• 3+ years of experience in a product security or related role.
• 3+ years of software development experience.
• Proficiency in threat modeling, static code analysis, and understanding of common vulnerability classes.
• Proficiency in C programming language.
• Experience integrating security into software and firmware development processes.
• Strong problem-solving skills and the ability to work collaboratively with cross-functional teams.
• Optional skills: knowledge of WebAuthn, OATH HOTP/TOTP, U2F, PIV, OpenPGP, .NET or C++, ARM development, and targeted fuzzing.

• Annual salary range: $120,000 – $140,000 (location-dependent adjustments apply).
• Flexible remote or hybrid work options.
• Comprehensive health, dental, and vision coverage with generous employer contributions.
• 401(k) retirement plan with dollar-for-dollar match up to 6% of salary.
• Wellness reimbursement of $1,200 annually.
• Professional development stipend of $3,000 per year.
• Paid time off: 15 vacation days, 10 holidays, 7 sick days.
• Paid parental leave: 8 weeks for all parents, with an additional 8 weeks for birthing parents.
• Commuter benefits and support for home office setup.
• Strong company mission and values, emphasizing inclusivity, collaboration, and innovation.

Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching.

When you apply, your profile goes through our AI-powered screening process designed to identify top talent efficiently and fairly.
🔍 Our AI evaluates your CV and LinkedIn profile thoroughly, analyzing your skills, experience, and achievements.
📊 It compares your profile to the job’s core requirements and past success factors to determine your match score.
🎯 Based on this analysis, we automatically shortlist the 3 candidates with the highest match to the role.
🧠 When necessary, our human team may perform an additional manual review to ensure no strong profile is missed.

The process is transparent, skills-based, and free of bias — focusing solely on your fit for the role.
Once the shortlist is completed, we share it directly with the company that owns the job opening. The final decision and next steps (such as interviews or additional assessments) are then made by their internal hiring team.

Thank you for your interest!

#LI-CL1