Staff Product Security Engineer

🔥 15 hours ago

🏄 California, Connecticut, +7 more states – Remote

🏄 California – Remote 🦌 Connecticut – Remote 🏛️ District of Columbia – Remote 🏖️ New Jersey – Remote 🗽 New York – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote ⚔️ Virginia – Remote ☕ Washington – Remote

💵 $168.2k - $269.9k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

ServiceTitan

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

💼 Consulting

📦 Logistics

📣 Marketing

💰 $200M Series G on 2021-06

Consulting • Logistics • Marketing

ServiceTitan is a comprehensive software platform designed for the trades industry, providing solutions to enhance productivity and profitability for businesses. It offers a variety of features including dispatching, scheduling, marketing, reporting, and customer experience tools, tailored for trades like plumbing, HVAC, electrical services, and more. ServiceTitan seeks to empower businesses by optimizing operations, improving cash flow, and delivering superior customer experiences through an all-in-one platform. The software includes real-time data analytics, financing options, and mobile capabilities to support the operational needs of contractors and increase their revenue streams. By consolidating multiple business functions into a single platform, ServiceTitan aims to help contractors grow profitably and efficiently.

📋 Description

• Embed with an engineering portfolio and own its security outcomes across application and cloud security • Participate in portfolio planning and design cadences • Review roadmaps, architecture proposals, and technical designs • Lead and scale threat modeling across the portfolio • Prioritize systems, coach squads, and track threats as requirements • Provide secure architecture guidance for cloud-native services, microservices, multi-tenant data access, identity, secrets, and AI-enabled features • Maintain an evidence-backed portfolio security risk picture • Partner with portfolio VPs and engineering leaders to set remediation priorities and drive vulnerability SLA adherence • Guide risk acceptance and exception processes • Adapt secure service templates, secrets-management patterns, cloud configuration templates, CI/CD guardrails, and IaC policy sets • Drive adoption of SAST, SCA, secrets scanning, IaC scanning, container scanning, and CSPM • Tune security-signal quality and distinguish noise from real risk • Review code and Terraform and pair with engineers on remediation • Write reference implementations and fixes • Recruit, coach, and support security champions • Deliver training, design reviews, and office hours • Provide feedback to the security program and Platform and Programs team • Contribute portfolio metrics on coverage, remediation velocity, and risk trends • Support security-incident triage and investigation and apply lessons learned to design and paved-road improvements

🎯 Requirements

• 7-10+ years in product security, application security, cloud security, or closely related security engineering • Strong software engineering foundation • Experience embedded with or partnering directly with engineering teams strongly preferred • Secure code review, threat modeling, secure design, CI/CD and supply chain security • Cloud identity and least privilege • IaC security, container and Kubernetes security, and cloud posture management • Proficiency reading and writing C#/.NET, Go, Java, or Python; C#/.NET preferred • Hands-on experience with Azure and/or AWS security services • Experience with Terraform or Bicep • Track record leading threat modeling and architecture review at scale • Ability to turn threat-modeling results into deliverable engineering requirements • Ability to build trust with VP-level engineering leaders and senior engineers • Experience driving priorities through partnership rather than mandate • Comfortable scripting and automating security tasks • Comfortable using AI-assisted tooling • Familiarity with securing AI-enabled features and AI coding agents • Familiarity with risks around non-human identities, MCP integrations, and data exposure in AI systems • Certifications such as CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, OSCP, or similar are a plus, not a requirement

🏖️ Benefits

• Flexible time off • Learning and development opportunities • Comprehensive onboarding program • Leadership training • Programs and events • Bonusly rewards • Peer-nominated awards • Company-paid medical, dental, and vision • 100% employer-paid options and 90% coverage for dependents • FSA and HSA • 401k match • Telehealth options including One Medical memberships • Parental leave and support • Up to $20k in fertility services, including IUI and IVF • Surrogacy and adoption reimbursement • On-demand maternity support through Maven Maternity • Free breast milk shipping through Maven Milk • Pet insurance • Legal advisory services • Financial planning tools • Annual bonus • Equity • Autonomous work support

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume