Senior Product Security Engineer

🕒 July 1

🇺🇸 United States – Remote

💵 $168k - $210k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 22%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Collibra

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2008

💼 Consulting

🏥 Healthcare

📦 Logistics

💰 Venture Round on 2022-01

Consulting • Healthcare • Logistics

Collibra is a leading provider of data intelligence solutions, recognized for its excellence in data governance, data cataloging, and data quality. The Collibra Data Intelligence Platform allows enterprises to manage and utilize data effectively by offering tools for data governance, data lineage, data privacy, and AI governance. With strong partnerships and a global presence, including offices in the USA and Belgium, Collibra supports various industries such as financial services, healthcare, retail, and more. Its platform is highly regarded for its robust integration capabilities, API offerings, and comprehensive approach to data risk management and compliance.

📋 Description

• Identify vulnerabilities and provide expert remediation consulting for global product development teams • Provide technical leadership and oversight for secure, resilient products and services • Act as an application security evangelist and partner with engineers • Perform application penetration testing for web applications, APIs, and thick clients • Perform internal and external network penetration testing • Apply cloud service penetration-testing methodologies across AWS, Azure, and GCP • Conduct threat modeling and source-code reviews • Ensure quality reports and services are delivered efficiently and on time • Collaborate with cross-functional teams to integrate security best practices into development • Enable vulnerability remediation through relationships with engineering teams • Develop professional skills through relevant certifications or training • Triage Code Security findings from SAST, SCA, IAST, and DAST when necessary • Leverage AI and MCP to create intelligent, context-aware security guidance and automation • Mentor junior teammates and mature security practices • Build repeatable penetration-testing methodologies tailored to Collibra’s environment • Independently plan and execute penetration-testing engagements • Partner with development teams to prioritize and remediate security issues • Develop a proactive security roadmap and incorporate threat intelligence to identify emerging threats and security gaps

🎯 Requirements

• 5+ years of relevant Penetration Testing, Product Security, and Application Security experience • 2+ years securing Java, Python, and/or JavaScript web applications • Experience with advanced security tools and techniques for simulating real-world attacks • Familiarity with OSSTMM, OWASP, SAMM, NIST Special Publications, and PTES • Experience testing against PCI, FISMA, HIPAA, FedRAMP, or HITRUST compliance frameworks • Strong working knowledge of at least two programming or scripting languages • Familiarity with securing SDLC and DevOps processes • Ability to triage security incidents • Experience with AI security tooling and context-aware SSDLC automation • Understanding of AI privacy and governance in developer workflows • Experience using and building collaborative agentic AI systems • Demonstrated proficiency using AI tools such as Claude, Gemini, ChatGPT, and Copilot • A bachelor’s degree or equivalent certification and experience • A bachelor’s degree or equivalent related working experience is required • This position is not eligible for visa sponsorship • Relevant security certifications strongly preferred, such as OSCP, OSWE, or CRTP • Working knowledge of Python, Java, and/or JavaScript • Experience performing security assessments against containerized cloud environments • Familiarity with AI standards and regulations, EU AI Act, SAIF, and ISO 42001

🏖️ Benefits

• Bonus potential • Equity for eligible roles • Flex Fund monthly stipend • Pension/401k plans • Competitive compensation • Health coverage • Time off • Flexible benefits offerings supporting diverse circumstances and life events