Senior Product Security Engineer

Posted 5 Days Ago
Easy Apply
Hiring Remotely in USA
Remote
138K-170K Annually
Senior level
Cloud • Security • Software • Cybersecurity
Red Canary empowers security professionals to transform their organization’s information security.
The Role
The Senior Product Security Engineer will enhance the product security program by collaborating with product teams, ensuring secure software development practices, conducting threat modeling and attack surface analysis, and mentoring junior team members. They will also implement security standards throughout the development lifecycle and ensure vulnerabilities are resolved efficiently.
Summary Generated by Built In

Who We Are

Red Canary was founded to create a world where every organization can make its greatest impact without fear of cyber threats. We’re a cyber security company who protects, supports and empowers organizations to make better security decisions so they can focus on their mission without fear of cyber threats.


The combination of our market-defining technology and expertise prevents breaches every day and sets a new standard for partnership in the industry. We’re united in our commitment to customers and grounded in our values, which earned us a place on the Forbes Best Start-up Employers 2022 list. If our mission resonates with you, let’s talk.


What We Believe In

- Do what’s right for the customer

- Be kind and authentic

- Deliver great quality

- Be relentless


Challenges You Will Solve

Delivering excellent, secure software is paramount to Red Canary's mission! Some of the best security teams in the world depend on our software to protect their organizations, and in turn we expect the highest standards of security for our platform.


Our Senior Product Security Engineers collaborate across product teams to mature our product security program and help ensure secure outcomes for software development at scale. Under your guidance, the Red Canary product security model will be viewed as the standard by which all other security providers are measured. The program you will join enables rapid development of our product features for our customers, by providing repeatable secure patterns and seamless guardrails.


A continuous improvement mentality is crucial for success! In this role you’ll get the opportunity to craft and implement security standard methodologies at every stage of the development lifecycle, from design through production. Not only will you have the chance to uncover exploitable bugs in software, but more meaningfully, you’ll be an integral piece of getting them fixed as early in the process as possible.

What You'll Do

  • Embed with the product teams and attend regular stand-ups and planning meetings and build positive relationships with key partners
  • Serve as the security authority on your product, ensuring the corporate security controls are working as designed, that security requirements are provided to the team before coding begins, and that vulnerabilities are being fixed within their SLAs
  • Ensure s-SDLC controls are embedded in your product and serve as control owner for a subset of these controls, mentoring other team members
  • Engage in application and domain-specific threat modeling, and attack surface analysis and reduction
  • Work alongside engineers, performing peer review and mentoring as needed
  • Assist in continuous improvement efforts and serve as a resource for more junior members

What You'll Bring

  • At least 5 years experience in securing enterprise-grade web applications and services with demonstrated expertise in threat modeling and attack surface analysis.
  • Solid understanding of common languages such as Ruby, Javascript, Go, etc.
  • Strong experience in web application security issues and standards (ex. OWASP Top 10, SANS Top 25, etc.)
  • Understanding and experience with securing public cloud deployments, including AWS and/or Azure, and serverless architecture 
  • Familiarity with CI/CD tools and processes, such as GitHub, Travis CI, CircleCI, Docker, and Kubernetes
  • Strong foundation in core information security principles and concepts (encryption, authentication, etc.)
  • Experience with automated application security tools and technologies (SAST, DAST, SCA etc.)
  • Excellent communication skills and the ability to explain sophisticated security topics in simple terms

Targeted base salary range: $138,400 - $170,000


This role is eligible for a grant of stock options, subject to the approval of the company's board of directors. This role is also eligible for participation in the company's bonus program.


The application deadline is December 13th, 2024.



Why Red Canary?

Red Canary is where people embody our mission to improve security outcomes for all. People work hard to maintain a culture that encourages authenticity in order to do your best work. Our people are driven and committed to finding the best security outcomes, delivering real and actionable answers, and being transparent along the way. 


At Red Canary, we offer a very rich benefits program to our full-time team members so they can focus on their families and improving our customers’ security. For a full list of benefits, please review our Benefits Summary:

https://resource.redcanary.com/rs/003-YRU-314/images/RedCanary_2025BenefitsSummary.pdf?version=0


Individuals seeking employment at Red Canary are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.

Top Skills

Go
JavaScript
Ruby

What the Team is Saying

Kenzi
Susannah
Josh
Dave
Diane
Joe
Brianne
Robbie
The Company
HQ: Denver, CO
420 Employees
Remote Workplace
Year Founded: 2014

What We Do

Red Canary is the leading security ally enabling every organization to make its greatest impact without fear of cyber-attack. The company provides outcome-focused solutions for security operations teams, who rely on Red Canary to analyze and respond to endpoint telemetry, manage alerts across the network, and provide cloud environment runtime threat detection. With Red Canary, security teams can make a measurable improvement to security operations within minutes.

Why Work With Us

Red Canary is relentless in our mission to improve information security—not just for our customers, but for the entire community. And it all starts with our people.

Gallery

Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery

Red Canary Offices

Remote Workspace

Employees work remotely.

Typical time on-site: None
HQDenver, CO
Our state-of-the-art HQ is located in the brand new McGregor Square centered in Denver's historic LoDo. From inception we have been hybrid workforce.

Similar Jobs

Red Canary Logo Red Canary

Senior Software Engineer (Ruby/Rails)

Cloud • Security • Software • Cybersecurity
Easy Apply
Remote
USA
420 Employees
135K-165K Annually

Red Canary Logo Red Canary

Senior Technical Support Engineer (EST)

Cloud • Security • Software • Cybersecurity
Easy Apply
Remote
USA
420 Employees
100K-105K Annually

Red Canary Logo Red Canary

Threat Response Engineer

Cloud • Security • Software • Cybersecurity
Easy Apply
Remote
USA
420 Employees
100K-120K Annually

Red Canary Logo Red Canary

Senior Threat Hunter

Cloud • Security • Software • Cybersecurity
Easy Apply
Remote
USA
420 Employees
124K-145K Annually

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account