Product Security Engineer

🕒 il y a 9 jours

🌐 États-Unis, Canada – Distant

🇺🇸 États-Unis – Télétravail 🇨🇦 Canada – Télétravail

💵 $175 000 - $200 000 / an

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Doppel

Site WebLinkedInTous les Emplois

201 - 500 employés

Fondée en 2022

🔒 Cybersecurity

🤖 Intelligence artificielle

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Doppel est une plateforme de défense native IA contre l'ingénierie sociale qui protège les organisations des usurpations, hameçonnages, deepfakes et attaques d'ingénierie sociale multi-canaux alimentés par l'IA. La plateforme unifie la Protection des Risques Numériques, la Gestion des Risques Humains (simulation et formation de sensibilisation à la sécurité), et la Sécurité des Emails pour détecter, corréler (via un graphique des menaces), et remédier aux infrastructures d'attaquants à travers les domaines, les réseaux sociaux, les réseaux publicitaires, les télécommunications, les places de marché et les canaux obscurs. Doppel met l'accent sur l'automatisation agentique de l'IA pour la détection, la mise hors service, le triage des hameçonnages et des Flux opérationnels scalables de SOC, et cible des clients entreprises dans des industries telles que les services financiers, la santé, la technologie, le commerce de détail et la fabrication.

Description

• Partner with product and engineering teams to support security architecture reviews for product features and the GCP environment; facilitate threat modeling and document risks, existing controls, and actionable recommendations. • Coordinate and support penetration testing engagements by assisting with vendor selection and scoping, establishing rules of engagement, coordinating testing activities, validating findings, supporting severity assessment, and tracking remediation and retesting in collaboration with engineering teams. • Serve as a GCP security subject matter expert for project teams, advising on secure patterns across networking (VPC, private access, perimeter controls), data protection (KMS, secrets), compute runtimes (GKE, Cloud Run, GCE), CI/CD (Cloud Build, Artifact Registry), and logging and monitoring. • Support the implementation and ongoing improvement of least-privilege IAM in GCP by advising on role design (custom vs. predefined), service account lifecycle management, workload identity, IAM Conditions, organization and folder policy constraints, and periodic access reviews. • Assist with triage and routing of product security findings to appropriate engineering owners; help tune detection rules to reduce noise, support severity and SLA definition, and track remediation progress, including documenting justified exceptions. • Contribute to security guardrails through policy and infrastructure-as-code (e.g., org policies, constraints, reusable Terraform modules, admission or policy controllers) and support integration of pre-merge security checks into CI/CD workflows. • Develop and maintain practical documentation and runbooks (e.g., design review checklists, IAM standards, exception processes) and deliver targeted enablement sessions for engineers and product managers. • Provide visibility into progress and risk through metrics and regular status updates to security leadership; proactively surface blockers and suggest options and tradeoffs. • Coach and mentor engineers and code owners on secure-by-default coding practices and architectural patterns.

🎯 Exigences

• 5–7 years of experience in product security, cloud security engineering, or a related field. • Strong knowledge of Google Cloud Platform (GCP) services and security best practices, including IAM, networking, data protection, and workload runtimes. • Hands-on experience with penetration testing coordination, threat modeling, and risk assessment. • Demonstrated proficiency in Python and cloud-native programming or scripting languages to design and maintain security automation, policy enforcement, and continuous compliance controls using Infrastructure as Code. • Familiarity with designing and enforcing least-privilege IAM and conducting access reviews. • Ability to communicate security risks and recommendations clearly to engineering and leadership audiences.

🏖️ Avantages

• Meaningful equity so you share in Doppel’s success • Remote first culture with flexibility built in • Flexible PTO, comprehensive health benefits, parental leave, and more • A high growth environment where your work has immediate impact and visibility