Senior Product Security Engineer (Contract)

12 hours, 39 minutes ago
Contract
Senior
Cybersecurity

Iru

Iru is an AI-powered IT and security platform for securing users, apps, and devices. It unifies identity and access, endpoint security and management, and compliance automation into one platform.

Enterprise IT, cybersecurity, identity/security, endpoint management, compliance software

Description

  • Perform security architecture and design reviews for products and features.
  • Conduct threat modeling for applications, APIs, and AI-enabled services.
  • Perform manual penetration testing across web, API, thick-client, and mobile applications.
  • Conduct secure code reviews and validate vulnerability remediation.
  • Partner with engineering teams to prioritize and remediate vulnerabilities.
  • Define secure coding standards, security guardrails, reusable patterns, and reference architectures.
  • Triage findings from SAST, DAST, SCA, container scanning, and cloud security tools while tracking remediation SLAs and metrics.
  • Assess AI and LLM applications for prompt injection, data leakage, insecure tool use, model abuse, and authorization weaknesses.
  • Integrate security tooling into CI/CD and developer workflows and build automation to reduce manual work.
  • Collaborate with Product, Engineering, Infrastructure, Cloud Security, Compliance, and Sales Engineering teams.

Requirements

  • 5+ years of experience in Product Security or Application Security.
  • Experience securing web applications, APIs, microservices, and cloud-native applications.
  • Experience with threat modeling and penetration testing.
  • Strong knowledge of the OWASP Top 10, OWASP API Top 10, authentication, authorization, OAuth/OIDC, and secure SDLC practices.
  • Experience with SAST, DAST, SCA, and container security tools.
  • Experience partnering directly with engineering teams.
  • Strong written and verbal communication skills.
  • Experience securing AI/LLM applications (preferred).
  • Experience with Kubernetes, containers, cloud security, and GitHub Actions or CI/CD security (preferred).
  • Experience with Snyk, Burp Suite Pro, Semgrep, Wiz, or GitHub Advanced Security; OSCP, GWAPT, GWEB, CSSLP, or CISSP certifications are preferred.

Benefits

  • Competitive salary.
  • 100% individual and dependent medical, dental, and vision coverage.
  • 401(k) with a 4% company match.
  • 20 days of paid time off and an annual Wellness Week.
  • Equity for full-time employees.
  • Up to 16 weeks of paid leave for new parents.
  • Paid family and medical leave.
  • Career growth opportunities.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Application Security Engineer II - Contract ( 6 months )

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is hiring a remote Application Security Engineer to triage and validate vulnerability submissions for client bug bounty programs, assess severity, and coordinate responses with researchers and customers.

Burp Suite Nmap
1 week, 1 day ago

Senior Identity Security Engineer (Remote - LATAM)

Atmosera 51-250 IT Services

Atmosera is seeking a Senior Identity Security Engineer to modernize and secure hybrid Active Directory and Microsoft Entra ID environments while advancing identity governance and Zero Trust initiatives for clients.

Active Directory Azure OAuth PowerShell SAML
2 days, 13 hours ago

Consultant - Senior Privacy Analyst

Kalles Group 11-50 Internet Software & Services

Kalles Group is seeking a privacy professional to build and manage a Canadian Records of Processing Activities (ROPA) program for a large global retailer, documenting data practices across business units and translating global structures into Canada-specific records.

1 week, 2 days ago

Cybersecurity, Incident Response & Hands-On Training Contract IT Instructor (Onsite and virtual live classes) (copy)

Pluralsight 1K-5K Internet Software & Services

Pluralsight is seeking independent contract cybersecurity instructors and scenario developers worldwide to deliver remote and onsite incident-response training, tabletop exercises, and Capture the Flag events for enterprise clients.

Bash Burp Suite Cybersecurity Docker Metasploit Penetration Testing Python Splunk Wireshark
1 week, 3 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers