Product Security Engineer

Staff Product Security Engineer We use cookies to make the safest and most effective website possible.# Service Titan Careers## Staff Product Security Engineer Apply:
US Remote:
Full time:
Posted Today:
JR116359##
** Ready to be a Titan?
** At Service Titan, we are transforming product security into a core part of how engineering delivers software. We are looking for a Staff Product Security Engineer to embed with one of our engineering portfolios and own its security outcomes end to end, across application security and cloud security, so that our 80 plus R&D teams build securely by default without slowing down  this role, you will sit alongside engineering leaders in planning and design, threat model systems before they are built, own the portfolio's risk picture, and bring secure-by-default patterns to each team's architecture and workflow.

You will be the security expert engineers know by name and the voice that carries their real-world context back into the program's strategy. This is an opportunity to shape how security is practiced where software actually gets built, turning security into an enabler of engineering velocity rather than a constraint.  ##
** What you'll do
**** Design Partnership**
* ** Standing Seat in Planning and Design:
** Join the portfolio's planning and design cadences as a permanent participant. Review roadmaps, architecture proposals, and technical designs early enough to shape them rather than gate them.
* ** Threat Modeling:
** Lead and scale threat modeling across the portfolio using the program's standard and tooling. Prioritize top-tier systems, coach squads to run their own models, and make sure identified threats become tracked requirements in the findings flow.
* ** Architecture Review:
** Provide secure architecture guidance for cloud-native services, microservices, multi-tenant data access, identity and secrets handling, and AI-enabled features. Translate the program's security requirements into concrete design decisions the squads can implement.
** Portfolio Risk Ownership**
* ** Own the Risk Picture:
** Maintain a current, evidence-backed view of the portfolio's security risk across application findings, cloud posture, identity, and data exposure. Know what each squad builds, the data it touches, and where it is heading.
* ** Drive Priorities with Engineering Leaders:
** Partner directly with the portfolio VP and their leaders to set remediation priorities, negotiate tradeoffs, and drive adherence to vulnerability remediation SLAs. Bring the data, own the follow through, and escalate with judgment.
* ** Risk Acceptance and Exceptions:
** Guide squads through the program's risk acceptance process. Make sure exceptions are documented, time-bound, and visible to the right decision makers.
** Paved-Road Adoption**
* ** Fit Central Patterns to Local Architecture:
** Take the paved roads built by the Platform and Programs team, including secure service templates, secrets management patterns, secure cloud configuration templates, CI/CD guardrails, and IaC policy sets, and adapt them to each squad's stack and workflow.
* ** Drive Adoption in the Field:
** Get squads onto SAST, SCA, secrets scanning, IaC scanning, container scanning, and CSPM coverage, and keep them there. Tune signal quality with squads so findings are actionable, and close the loop on what is noise versus real risk.
* ** Hands-On Remediation Support:
** Read the code, review the Terraform, and pair with engineers on fixes for the hard findings. Write reference implementations and fixes when that is the fastest way to unblock a squad.
** Champion Coaching**
* ** Develop the Portfolio's Champions:
** Recruit, coach, and support the security champions across your squads. Be the technical expert they bring the hard questions to, and build them into the portfolio's first line of security response.
* ** Contextual Enablement:
** Deliver just-in-time training, design reviews, and office hours tuned to what the portfolio is actually building. Help squads learn to fix their own code and configuration.
** Strategy Feedback**
* ** Feed the Program

Roadmap:

** Bring real engineering context back to the Director and the Platform and Programs team. Identify where central tooling, patterns, or standards fall short of what squads need, and shape what gets built next.
* ** Metrics and Reporting:
** Contribute portfolio-level data to the program's metrics rhythm. Report on coverage, remediation velocity, and risk trends for your portfolio to security and engineering…