Product Security Engineer (Remote)

About the role

We are seeking a Product Security Engineer to join a global leader in software development and IT consulting. This fully remote, full‑time position focuses on embedding security into a cloud‑native platform, driving threat modeling, secure coding, and vulnerability remediation throughout the product lifecycle.

Key responsibilities

• Define and maintain security requirements for product features and infrastructure.
• Conduct threat modeling and risk assessments for new and existing functionalities.
• Implement secure coding practices and security testing methods such as SAST, DAST, and penetration testing.
• Collaborate with engineering teams to design and deploy secure cloud architectures on AWS, Azure, or GCP.
• Monitor security vulnerabilities and coordinate remediation across cross‑functional teams.

Required profile

• Proven experience with secure software development lifecycle (SDLC) processes.
• Strong background in threat modeling methodologies and tools.
• Hands‑on knowledge of cloud security best practices for major providers.
• Familiarity with container security, including Docker and Kubernetes.
• Ability to produce clear security documentation and guidelines.

Required skills

• Secure SDLC
• Threat modeling
• AWS, Azure, GCP
• SAST, DAST, penetration testing
• Docker, Kubernetes
• Identity and Access Management (IAM)
• Zero‑trust principles