The Product Security Engineer integrates security throughout the product lifecycle. Responsibilities include threat modeling, risk assessment, application and mobile security testing, penetration testing, code review, DevSecOps tooling, AWS security, automation, vulnerability management, security analytics, monitoring, and developer education. The role partners with engineering, product, DevOps, infrastructure, and platform teams to establish secure development practices and security controls.

Maintains and matures security governance, risk, and compliance frameworks; conducts risk assessments, policy management, third-party risk reviews, control testing, and audit coordination. Leads data privacy operations including DPIAs, data mapping, ROPA maintenance, DSAR handling, regulatory monitoring, and privacy-by-design implementation. Develops security and data-handling awareness training and translates legal and technical requirements for business, product, IT, and executive stakeholders.