Senior Product Security Engineer; land

We understand that the world we want tomorrow starts with how we do business today, and that’s why we’re inspired to make A Better World for Pets.

Antech is comprised of a diverse team of individuals who are committed to each other's growth and development. Our culture is centered on our guiding philosophy, The Five Principles:
Quality, Responsibility, Mutuality, Efficiency and Freedom.

Today Antech is driving the future of pet health as part of Mars Science & Diagnostics, a family-owned company focused on veterinary care. Current Associates will need to apply through the internal career site. Please log into Workday and click on Menu or View All Apps, select the Jobs Hub app, then click the magnifying glass to Browse Jobs.

This is an onsite role based out of our office in Loveland, Colorado. The Target Pay Range for this position is $141,000 - $176,000 annually. At Antech, pay decisions are determined using factors such as relevant job-related skills, experience, education, training, and budget.

The Sr. Product Security Engineer will be responsible for defining, implementing and enforcing secure coding practices to ensure that software security is embedded early on (shifting left) throughout product development lifecycle. To achieve this, the candidate will be collaborating with the Software Engineering Development Teams and the Cybersecurity team in leading and enhancing the design and implementation of information security requirements, including secure coding standards, language-specific secure coding guidelines, as well as secure SDLC methodologies.

This role requires strong expertise in secure coding standards, vulnerability management, and collaboration with development teams to build secure applications.

• Develop, maintain, and implement secure coding standards based on industry best practices such as NIST 800-53, OWASP, CWE, CERT, and ISO.
• Develop, implement, and maintain coding standards based on language-specific secure coding guidelines for languages such as JavaScript, .NET, Type Script, and mobile OS-based languages, as well as Cloud-related security best practices.
• Lead the design, development, and maintenance of secure services and APIs using modern frameworks.
• Act as the subject matter expert for secure coding practices.
• Integrate security principles into the Software Development Lifecycle, ensuring compliance with security and privacy policies and standards.
• Conduct secure code reviews (manual and automated) and analysis (SAST, DAST, SCA) to identify and remediate vulnerabilities directly in the codebase.
• Work closely with software developers and Dev Ops teams to remediate vulnerabilities and enhance secure coding practices.
• Provide training, mentorship, and technical guidance to developers and junior security engineers on secure coding techniques and threat mitigation strategies.
• Establish and manage automated security testing within CI/CD pipelines.
• Lead risk assessments and threat modeling exercises to provide vulnerability remediation guidance to product development teams globally.
• Ensure architecture aligns with industry standards for security, including encryption, disaster recovery, authentication, and patch management.
• Stay up to date on emerging security threats, vulnerabilities, and mitigation techniques.

• Bachelor’s or Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering or related field.
• 7+ years of experience in secure software development, application security or Dev Sec Ops .
• Hand-on experience static, dynamic and Software Composition Analysis (SAST/DAST/SCA) tools.
• Experience with security testing tools like Sonar Qube, Checkmarx, Fortify, Veracode, Burp Suite, or similar…