Product Security Engineer

Вакансия Product Security Engineer в компании Action1, удалённо, базируется в Сербия. Роль включает поддержку команды реагирования на инциденты продуктовой безопасности, валидацию и triage сообщений об уязвимостях, предоставление рекомендаций по устранению, анализ кода и архитектуры, моделирование угроз, улучшение автоматизации безопасности, поддержку SAST/SCA/scanning секретов, управление SBOM и зависимостями, участие в оценках уязвимостей и пентесте.

Обязанности

Support Product Security Incident Response Team (PSIRT) and vulnerability-handling activities; Validate, triage, track, and coordinate security reports; Provide practical remediation guidance to engineering teams; Help validate security fixes and reduce product security risks; Review code, APIs, and system architecture to identify security issues early; Conduct threat modeling and security design reviews; Improve security automation within engineering workflows; Support SAST, SCA, secrets scanning, and other security controls; Maintain software bills of materials (SBOMs), dependency visibility, and remediation follow-up; Support security assessments, vulnerability assessments, and penetration testing; Maintain vulnerability-handling playbooks, product security procedures, and incident response runbooks

Требования

3+ years of experience in product security, application security, DevSecOps, or a related cybersecurity field; Strong software engineering background and the ability to work effectively with engineering teams; Understanding of application, API, infrastructure, and software supply chain security risks; Experience applying cloud security concepts and practices; Understanding of identity and access management, network security, logging, monitoring, and secure cloud architecture patterns; Familiarity with vulnerability management, incident response, security assessments, and secure software development lifecycle practices; Experience with threat modeling and security design reviews; Strong communication skills, including professional communication with external security researchers and vendors; Ability to work independently and collaboratively in a fast-moving environment

Условия

A fully remote work environment; The opportunity to work on a real-world security product used by IT and security teams; High ownership and a direct impact on product security practices; Close collaboration with engineering, product, and security teams; A fast-growing software company with low bureaucracy and practical decision-making; The opportunity to improve security processes, automation, and engineering workflows; A supportive team that values clear thinking, ownership, and continuous learning

Откликнуться на вакансию свайпом в Telegram

Зарплату работодатель не указал. Ориентир по данным исследований.

Работа в информационной безопасности — все вакансии подборки

Swipe Jobs — поиск работы свайпами в Telegram. Тысячи вакансий из каналов и с сайтов компаний в одной ленте, отклик в один клик прямо в чате с работодателем.