Senior Product Security Engineer

Job not on LinkedIn

🕒 April 9

🇺🇸 United States – Remote

💵 $113k - $125k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Harness

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2016

☁️ SaaS

🔒 Cybersecurity

Software • SaaS • Cybersecurity

Harness is an AI-native software delivery platform that empowers engineering and DevOps teams to achieve high levels of engineering excellence. It offers innovative DevOps tools such as Continuous Delivery and GitOps, Continuous Integration, Feature Management and Experimentation, Infrastructure as Code Management, and Chaos Engineering. The platform is designed to enhance software delivery through automation and insights, improving developer productivity and experience. Harness integrates security in the delivery pipeline to ensure the integrity of the software supply chain and optimizes cloud spend with its cloud cost management tools. Additionally, Harness AI assists with various aspects of software delivery, leveraging automation to simplify tasks and improve efficiency. Harness's solutions help businesses modernize their DevOps processes, secure software delivery, and optimize cloud expenditures.

📋 Description

• Design and develop product security APIs, tools, and utilities for internal and external stakeholders. • Conduct threat modeling and secure design reviews for application backend services and business integrations. • Perform advanced penetration tests and adversarial attack simulations against Harness modules, APIs, and codebase using industry-standard frameworks. • Lead manual and automated code review efforts to discover vulnerabilities, weaknesses, and anti-patterns in the Harness platform. • Implement and operate security tooling including SAST, DAST, and SCA, and integrate these into CI/CD pipelines. • Consult and advise developers and Product Managers on security standards, vulnerability remediation, and security architecture. • Assess risks and trade-offs, and propose solutions for product security features such as authentication and authorization. • Participate in the creation, review, and implementation of technical security standards across global engineering teams. • Use the Harness platform to integrate security processes like vulnerability management into the SDLC. • Collaborate cross-functionally with Engineering and Product to accelerate the release of software with security by design.

🎯 Requirements

• BS in Computer Science or a related degree. • 5+ years of relevant industry experience with a strong security focus. • Solid experience with DevSecOps practices and secure SDLC methodologies. • Good working knowledge of cyber security frameworks including OWASP, SANS, NIST, and CIS. • Ability to describe software supply chain risks and Secure SDLC best practices. • Experience with public or private cloud environments such as K8s, AWS, GCP, or Azure. • Professional knowledge of enterprise applications, API development, and modern software delivery processes. • Previous experience in a cloud-native environment. • Proficiency in Java or a comparable language and object-oriented programming methodology. • Hands-on experience with security testing tools and vulnerability management workflows.