Product Security Engineer (Remote)

About the role

We are seeking a Product Security Engineer to join a leading global IT services firm. The role is fully remote and focuses on embedding security into a cloud‑native platform, covering threat modeling, secure development practices, and vulnerability remediation.

Key responsibilities

• Develop and maintain security requirements for product features and infrastructure.
• Conduct threat modeling and risk assessments for new and existing functionalities.
• Implement secure coding standards and security testing methodologies.
• Collaborate with engineering teams to design and deploy secure cloud architectures.
• Monitor security vulnerabilities and coordinate remediation across teams.

Required profile

• Proven experience with secure software development lifecycle (SDLC) practices.
• Hands‑on expertise in threat modeling methodologies and tools.
• Deep knowledge of cloud security for AWS, Azure, or GCP.
• Familiarity with security testing tools such as SAST, DAST, and penetration testing.
• Experience securing container environments (Docker, Kubernetes).
• Strong understanding of identity and access management (IAM) and zero‑trust principles.
• Ability to produce clear security documentation and guidelines.

Required skills

• Secure Software Development Lifecycle (SDLC)
• Threat Modeling
• AWS
• Azure
• GCP
• SAST
• DAST
• Penetration Testing
• Docker
• Kubernetes
• Identity and Access Management (IAM)
• Zero Trust

What we offer

• Competitive salary range $250K‑$400K per year.
• Fully remote work arrangement.
• Opportunity to work on AI‑powered solutions in a high‑growth tech environment.
• Collaboration with cross‑functional global teams.