Senior Product Security Engineer

About the role

You are/have worked on Threat Modelling, Source Code Review, Penetration Testing and performing security analysis on existing or new products and provide security guidance and input to product engineers. You have worked on problems of varied scope independently and able to drive strategy for Product Security in the limited scope of work and provide general guidance and/or direction on routine work to achieve overall program performance, schedule, and quality standards

Position Overview

Senior Product Security Engineer is responsible for executing the Security Development Lifecycle (SDL) for Cloud Software Group On-Prem and Cloud products to ensure that our software meets the customer expectation of security robustness. and drive and execute SDL best practices

Duties and Responsibilities

• You will be responsible for executing the Secure Software Development Lifecycle (SSDLC) for Cloud Software Group On-Prem and Cloud products to ensure that our software meets the customer expectation of security robustness.
• You will guide product development teams on design changes as per security requirements.
• Perform targeted, high-impact source code reviews (C, C++, C#) integrated with modern AI-assisted tools.
• Execute the penetration tests internally to identify security vulnerabilities.

Basic Qualifications

• You have a Full-time degree in Engineering (Preferably Computer Science related)
• You are an expert in at least one of these areas in security - Windows / Unix System, Network, Cryptography
• Strong C, C++, C# skills
• Strong Linux and Windows internals knowledge, including low-level system architecture.
• Good knowledge of Networking (TCP/IP) and other protocols like HTTP/S, DNS, et.al.
• Basic understanding of File system concepts.
• Experience with object-oriented design concepts.
• Extensive knowledge of common vulnerabilities - able to explain and remediate the OWASP Top 10 vulnerabilities across multiple programming languages
• 6+ years of relevant experience.
• Deep understanding of application architecture and design principles
• Experience in design review and threat modelling activities
• You are capable of writing exploits for vulnerabilities identified in those respective areas.
• Have excellent capabilities to identify security vulnerabilities and perform root cause analysis.

Additional information

Compensation may vary depending on your location, qualifications including job-related education, training, experience, licensure, and certification, that could result at a level outside of these ranges. Certain roles are eligible for additional rewards, including annual bonus, and sales incentives depending on the terms of the applicable plan and role as well as individual performance.

CA generally ranges: $1-$100,000,000 All other locations fall under our General State range: $1-$100,000,000 Benefits may vary depending on the nature of your employment with Cloud Software Group and the country where you work. U.S. based employees are typically offered access to healthcare, life insurance and disability benefits, 401(k) plan and company match, among others.

This requisition has no specific deadline for completion.