Employer description & source details
Collaborate with product and engineering teams to integrate security principles into the design and architecture of products. Lead complex threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across the full product surface. Drive strategy, influence architecture, and set direction for security across multiple teams or org-wide. Manage the Secure Development pipeline including code security and 3rd party library supply chain security. Stay current on emerging standards and guidance (e.g. OWASP Top 10 for LLMs, MCP security specifications) and translate these into actionable internal policy. Own responsibility disclosed vulnerabilities in both Cloud and Open Source products. Able to participate in on-call rotation. Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience). 7+ years in application or product security or a related role. Proven partnership with engineering teams, bringing security expertise to the planning and development process. Ability to write production-quality code in at least one programming language, with a history of development beyond simple scripting. Knowledge of encryption, authentication, and secure communication protocols. Familiarity with tools like SAST, DAST, and penetration testing frameworks. A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages Excellent communication and ability to explain complex security concepts to non-technical stakeholders. Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control. Demonstrated experience with multi-tenant security architecture, including data plane isola
Extracted skills: kubernetes, cybersecurity, security