Product Security Engineer

SmartBear is seeking a Product Security Engineer to champion security throughout their product and engineering workflows. In this role, you will define security expectations, verify security controls, and provide essential training and awareness. You will collaborate with product and engineering leaders to pinpoint security weaknesses and develop protective features, aiming to enhance customer trust and drive adoption of SmartBear's innovative products.

This position offers the opportunity to work with a diverse range of programming languages including Go, Java, Node.js, React JS, Ruby, and Python, utilizing cutting-edge cloud-based tools. You will join a dynamic Product Security team, working closely with product and engineering groups to gain a deep understanding of product priorities, architecture, and delivery schedules. This embedded approach allows you to effectively integrate security measures at critical stages of the SDLC.

Key responsibilities include partnering with engineering teams, architects, and product leaders to validate the security posture of new and existing features before production deployment. You will participate in Security Reviews, including threat modeling exercises, code review support, and penetration testing, often under the guidance of senior team members. Triage and validation of reported vulnerabilities, understanding their impact, and collaborating on remediation strategies will also be a core function. You will contribute to secure development lifecycle activities by learning and promoting security best practices through documentation and enablement, and by clearly communicating findings, documenting security issues, and verifying remediation efforts.

The ideal candidate will possess 1-3 years of experience in software engineering, cybersecurity, or application security. Familiarity with core application security concepts like the OWASP Top 10 and secure coding principles is expected. Exposure to SaaS products, cloud environments, or modern development pipelines is beneficial. A basic ability to read and understand code in at least one common programming language (Java, Python, JavaScript, etc.) is required. Awareness of common security testing tools and vulnerability management processes is also important. We are looking for individuals with strong curiosity, a collaborative spirit, and a genuine desire to grow into a senior Product Security role.

SmartBear offers a supportive environment for career growth, invests in employee success, and fosters a collaborative and fun work culture. The company values its employees holistically, encouraging work-life balance, including celebrating birthdays off. SmartBear is committed to diversity and inclusion, recognizing that a variety of experiences and viewpoints lead to better outcomes. They are an equal opportunity employer dedicated to treating all individuals with respect and dignity, making employment decisions based on merit, qualifications, and business needs, without regard to race, color, religion, sex, national origin, age, gender, disability, veteran status, sexual orientation, or any other protected status.