Product Security Engineer

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Action1

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2018

☁️ SaaS

🔒 Cybersecurity

🏢 Enterprise

SaaS • Cybersecurity • Enterprise

Action1 is a cloud-native autonomous endpoint management platform that automates cross-OS (Windows, macOS) and third‑party application patching, vulnerability detection and remediation, and remote software deployment across distributed networks without requiring VPN or domain join. The platform provides continuous patch compliance and reporting (PCI, HIPAA, SOC 2, CIS, etc. ), MSP/MSSP-focused services, APIs and PowerShell automation, and real-time scalability for enterprise environments to reduce cyber risk and operational costs.

📋 Description

• Support Product Security Incident Response Team (PSIRT) and vulnerability-handling activities • Validate, triage, track, and coordinate security reports • Provide practical remediation guidance to engineering teams • Help validate security fixes and reduce product security risks • Review code, APIs, and system architecture to identify security issues early • Conduct threat modeling and security design reviews • Improve security automation within engineering workflows • Support SAST, SCA, secrets scanning, and other security controls • Maintain software bills of materials (SBOMs), dependency visibility, and remediation follow-up • Support security assessments, vulnerability assessments, and penetration testing • Maintain vulnerability-handling playbooks, product security procedures, and incident response runbooks

🎯 Requirements

• 3+ years of experience in product security, application security, DevSecOps, or a related cybersecurity field • Strong software engineering background and the ability to work effectively with engineering teams • Understanding of application, API, infrastructure, and software supply chain security risks • Experience applying cloud security concepts and practices • Understanding of identity and access management, network security, logging, monitoring, and secure cloud architecture patterns • Familiarity with vulnerability management, incident response, security assessments, and secure software development lifecycle practices • Experience with threat modeling and security design reviews • Strong communication skills, including professional communication with external security researchers and vendors • Ability to work independently and collaboratively in a fast-moving environment • Genuine interest in cybersecurity and motivation to grow as a product security expert • Hands-on experience with AWS security controls, best practices, and architecture patterns • Hands-on experience with C++ or JavaScript • Experience with security testing and automation using scripts, APIs, CI/CD pipelines, or specialized tools • Experience conducting threat modeling for SaaS, API, cloud, or on-premises product components • Experience with SBOM generation, dependency visibility, or software supply chain security

🏖️ Benefits

• A fully remote work environment • The opportunity to work on a real-world security product used by IT and security teams • High ownership and a direct impact on product security practices • Close collaboration with engineering, product, and security teams • A fast-growing software company with low bureaucracy and practical decision-making • The opportunity to improve security processes, automation, and engineering workflows • A supportive team that values clear thinking, ownership, and continuous learning