Staff Product Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Responsibilities:
- Embed with an engineering portfolio and own its security outcomes across application and cloud security
- Participate in portfolio planning and design cadences
- Review roadmaps, architecture proposals, and technical designs
- Lead and scale threat modeling across the portfolio
- Prioritize systems, coach squads, and track threats as requirements
- Provide secure architecture guidance for cloud-native services, microservices, multi-tenant data access, identity, secrets, and AI-enabled features
- Maintain an evidence-backed portfolio security risk picture
- Partner with portfolio VPs and engineering leaders to set remediation priorities and drive vulnerability SLA adherence
- Guide risk acceptance and exception processes
- Adapt secure service templates, secrets-management patterns, cloud configuration templates, CI/CD guardrails, and IaC policy sets
- Drive adoption of SAST, SCA, secrets scanning, IaC scanning, container scanning, and CSPM
- Tune security-signal quality and distinguish noise from real risk
- Review code and Terraform and pair with engineers on remediation
- Write reference implementations and fixes
- Recruit, coach, and support security champions
- Deliver training, design reviews, and office hours
- Provide feedback to the security program and Platform and Programs team
- Contribute portfolio metrics on coverage, remediation velocity, and risk trends
- Support security-incident triage and investigation and apply lessons learned to design and paved-road improvements
Requirements:
- 7-10+ years in product security, application security, cloud security, or closely related security engineering
- Strong software engineering foundation
- Experience embedded with or partnering directly with engineering teams strongly preferred
- Secure code review, threat modeling, secure design, CI/CD and supply chain security
- Cloud identity and least privilege
- IaC security, container and Kubernetes security, and cloud posture management
- Proficiency reading and writing C#/.NET, Go, Java, or Python; C#/.NET preferred
- Hands-on experience with Azure and/or AWS security services
- Experience with Terraform or Bicep
- Track record leading threat modeling and architecture review at scale
- Ability to turn threat-modeling results into deliverable engineering requirements
- Ability to build trust with VP-level engineering leaders and senior engineers
- Experience driving priorities through partnership rather than mandate
- Comfortable scripting and automating security tasks
- Comfortable using AI-assisted tooling
- Familiarity with securing AI-enabled features and AI coding agents
- Familiarity with risks around non-human identities, MCP integrations, and data exposure in AI systems
- Certifications such as CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, OSCP, or similar are a plus, not a requirement
Benefits:
- Flexible time off
- Learning and development opportunities
- Comprehensive onboarding program
- Leadership training
- Programs and events
- Bonusly rewards
- Peer-nominated awards
- Company-paid medical, dental, and vision
- 100% employer-paid options and 90% coverage for dependents
- FSA and HSA
- 401k match
- Telehealth options including One Medical memberships
- Parental leave and support
- Up to $20k in fertility services, including IUI and IVF
- Surrogacy and adoption reimbursement
- On-demand maternity support through Maven Maternity
- Free breast milk shipping through Maven Milk
- Pet insurance
- Legal advisory services
- Financial planning tools
- Annual bonus
- Equity
- Autonomous work support
Similar Jobs
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.
Security Assessor
Security Assessor evaluating federal information systems against NIST RMF and FedRAMP requirements. Conducting control assessments, risk analysis, ATO support, and compliance documentation remotely.
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Manager, Cloud Security Engineering
Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.
Security Engineer
Security Engineer owning vulnerability management, SIEM, and incident investigations. Securing cloud-native AWS environments for Arionkoder’s AI consulting clients.
IT Systems and Security Specialist I
IT systems and security specialist supporting Aspire Living & Learning’s service operations remotely. Maintaining IT systems and security while traveling periodically across the service area.
Associate, Cybersecurity – Data Privacy Incident Response
Associate attorney advising clients through cybersecurity incidents, data breaches, and breach notification requirements. Supporting Constangy's national Cybersecurity & Data Privacy practice.
Associate, Cybersecurity – Data Privacy Litigation
Associate attorney defending privacy, cybersecurity, and complex commercial litigation for Constangy, Brooks, Smith & Prophete, LLP. Conducting research, drafting litigation documents, and supporting cases through trial preparation.
Associate Security Researcher
Associate Security Researcher supporting Cobalt’s penetration-testing research through systems administration, threat simulation, vulnerability triage, and technical report quality control.
Cyber Security Engineer
Cyber Security Engineer leading incident response, threat hunting, and forensics for NVIDIA’s corporate, cloud, and product environments. Building automated defenses against advanced threats.
Senior Security Research Architect, Confidential Computing
Senior Security Research Architect designing Trusted Execution Environment architectures for NVIDIA NICs and DPUs. Driving confidential-computing security across hardware, software, research, and product teams.
IT and Security Manager
IT and Security Manager securing Microsoft 365, Azure, vendors, and cybersecurity operations for Furnished Quarters’ furnished apartment business. Managing infrastructure, incident response, access, compliance, and technology partnerships.
Senior Security Engineer
Senior Security Engineer protecting Cisco’s network-device portfolio through threat modeling, code review, and reproducible security testing. Improving embedded and IoT security across hardware, firmware, and device lifecycles.
Regional Sales Manager – Security
Regional Sales Manager growing security-channel sales for Nice North America, a smart home and building automation company. Managing customers, training partners, exceeding quotas, and providing competitive intelligence across the assigned territory.
Senior Director, Product Security and Privacy Counsel
Product counsel guiding security, privacy, open-source licensing, and regulatory risk for Neo4j’s graph intelligence platform. Partnering with product, engineering, security, and go-to-market teams.
Senior Security Engineer, Product
Senior Security Engineer owning product and protocol security for Jito’s Solana market infrastructure. Building security tooling, monitoring, audits, and protections for crypto products.
Principal Security Engineer
Principal Security Engineer assessing CSP architectures and authorization packages for FedRAMP compliance. Supporting Valiant Solutions’ federal cybersecurity and IT services for government customers.