Product Security Engineer, Server

Responsibilities

• Take ownership, define strategy, and drive improvement for security program areas such as fuzzing, threat modeling, secrets management, and container security.
• Support engineering teams responding to security issues by providing risk analysis and proofs of concept.
• Advocate for and contribute to complex security projects from inception through completion.
• Drive architecture, patterns, and processes across Server Engineering that make security the easiest path.
• Partner with engineering teams to design and implement security controls across software and systems.
• Research and proof-of-concept new attacks against systems.
• Plan and perform product security assessments, including architecture reviews, threat modeling, code review, penetration testing, and general security consulting.
• Serve as a security subject matter expert for software security and architecture.
• Educate the engineering organization through CTFs, lunch-and-learns, and one-on-one mentorship.

Requirements

• 3 years of experience in application security, software security, or product security.
• Experience with C++ programming, security assessments of low-level codebases, and remediation of memory-related security flaws such as buffer overflows and memory leaks.
• Scripting experience and the ability to contribute code to engineering environments.
• Ability to lead threat modeling and serve as a security ambassador to engineering teams.
• Ability to communicate complex technical issues clearly to varied audiences.
• Strong ownership and delivery skills.
• Ability to facilitate collaborative conversations.
• Ability to provide collaborative, actionable feedback.

Nice-to-Haves

• Subject matter expertise in database security or data security.
• Knowledge of database engines, database internals, or applied cryptography.
• Experience partnering with security researchers to identify vulnerabilities published as CVEs or handling CNA administrative responsibilities.

Success in This Role

• See projects through from conception to completion to deliver new services or capabilities.
• Establish yourself as a go-to person for security topics.

Compensation and Benefits

• U.S. base salary range: $106,000–$209,000 USD.
• Compensation is based on factors including skills, experience, qualifications, and work location.
• Total compensation may also include equity and participation in the employee stock purchase program.
• Eligible benefits may include flexible paid time off, 20 weeks of fully paid gender-neutral parental leave, fertility and adoption assistance, a 401(k) plan, mental health counseling, transgender-inclusive health insurance coverage, and health benefits offerings.