Senior Product Security Engineer

Emploi pas sur LinkedIn

🕒 il y a 3 mois

🇺🇸 États-Unis – Télétravail

💵 $113 000 - $125 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Harness

Site WebLinkedInTous les Emplois

501 - 1000 employés

Fondée en 2016

☁️ SaaS

🔒 Cybersecurity

Software • SaaS • Cybersecurity

Harness est une plateforme de livraison de logiciels qui permet aux organisations de rationaliser le processus de développement grâce à l'intégration continue (CI) et à la livraison continue (CD). La plateforme offre des outils pour gérer les dépôts de code, l'infrastructure en tant que code, et les feature flags, tout en fournissant des insights sur les processus d'ingénierie logicielle. Harness permet aux développeurs d'accroître leur productivité tout en garantissant la sécurité et la fiabilité dans le cycle de vie du déploiement logiciel.

Description

• Design and develop product security APIs, tools, and utilities for internal and external stakeholders. • Conduct threat modeling and secure design reviews for application backend services and business integrations. • Perform advanced penetration tests and adversarial attack simulations against Harness modules, APIs, and codebase using industry-standard frameworks. • Lead manual and automated code review efforts to discover vulnerabilities, weaknesses, and anti-patterns in the Harness platform. • Implement and operate security tooling including SAST, DAST, and SCA, and integrate these into CI/CD pipelines. • Consult and advise developers and Product Managers on security standards, vulnerability remediation, and security architecture. • Assess risks and trade-offs, and propose solutions for product security features such as authentication and authorization. • Participate in the creation, review, and implementation of technical security standards across global engineering teams. • Use the Harness platform to integrate security processes like vulnerability management into the SDLC. • Collaborate cross-functionally with Engineering and Product to accelerate the release of software with security by design.

🎯 Exigences

• BS in Computer Science or a related degree. • 5+ years of relevant industry experience with a strong security focus. • Solid experience with DevSecOps practices and secure SDLC methodologies. • Good working knowledge of cyber security frameworks including OWASP, SANS, NIST, and CIS. • Ability to describe software supply chain risks and Secure SDLC best practices. • Experience with public or private cloud environments such as K8s, AWS, GCP, or Azure. • Professional knowledge of enterprise applications, API development, and modern software delivery processes. • Previous experience in a cloud-native environment. • Proficiency in Java or a comparable language and object-oriented programming methodology. • Hands-on experience with security testing tools and vulnerability management workflows.