Senior Product Security Engineer

About the role:

We are seeking a seasoned and strategic Senior Product Security Engineer to join our high-performing team. This role demands a deep understanding of the evolving threat landscape and the ability to translate complex security concepts into actionable strategies. As a Senior Product Security Engineer, you will be instrumental in safeguarding our SaaS application, ensuring compliance with industry regulations, and driving a culture of security within the organization.

What you'll do:

• Security Architecture and Strategy: Develop and implement a comprehensive product security architecture. Lead security risk assessments and threat modeling to identify and mitigate potential vulnerabilities. Collaborate with product teams to embed security by design principles.

• Security Engineering and Implementation: Oversee secure software development lifecycle (SDLC) activities, including code reviews, security testing, and vulnerability management. Implement and maintain security controls, such as firewalls, intrusion detection systems, and encryption.

• Incident Response and Management: Develop and lead incident response plans. Conduct thorough investigations, containment, eradication, and recovery efforts. Conduct post-incident analysis to identify lessons learned and implement preventive measures.

• Compliance and Risk Management: Ensure compliance with industry regulations (e.g., SOC 2, GDPR, PCI DSS) and internal security policies. Conduct regular security audits and assessments. Manage security risks and develop mitigation strategies.

• Team Leadership and Mentorship: Provide technical leadership and mentorship to the security team. Collaborate with cross-functional teams to foster a strong security culture.

• Executive Communication: Effectively communicate complex security issues and risks to executive leadership. Develop and deliver informative reports and presentations on the security posture of the organization. Influence strategic decision-making based on security considerations.

What you'll bring:

• Bachelor's degree in Computer Science, Information Security, or a related field.

• Minimum of 7 years of experience in product security, with a proven track record of securing complex SaaS applications.

• Deep understanding of security principles, practices, and frameworks (e.g., OWASP, NIST).

• Expert knowledge of secure coding practices, threat modeling, and vulnerability assessment methodologies.

• Hands-on experience with security tools and technologies (e.g., SAST, DAST, SIEM, WAF).

• Strong understanding of cloud security architectures (AWS, Azure, GCP).

• Experience in incident response and crisis management.

• Proven ability to lead and mentor security teams.

• Excellent communication and interpersonal skills, including the ability to articulate complex technical information to non-technical audiences.

• Strong analytical and problem-solving abilities.

Preferred Skills and Qualifications:

• Relevant certifications such as CISSP, CEH, OSCP, or similar.

The Company:

Absorb Software is a remote-first company offering online training solutions to leading organizations globally. As a cloud-based learning management system (LMS), we're engineered to inspire learning and fuel business productivity. We're passionate about empowering learners to enrich their lives, workplaces, and communities.

Our Core Values:

• Achieving exceptional results by genuinely caring about each other and our work.
• United growth through a commitment to elevating continuous learning.

Absorb celebrates diversity and is committed to creating an inclusive environment for all members. All employment decisions are based on business needs, job requirements, and individual qualifications. Successful candidates will undergo pre-employment screening, including a criminal record check, and must show proof of legal eligibility to work in the applied country without sponsorship.

For any accommodations during the recruitment process, please indicate this on your application. We're dedicated to meeting your accessibility needs. For inquiries, please contact us at accessiblecareers@absorblms.com.