Product Security Engineer Job Houston Texas USA,IT/Tech

Accountabilities

Collaborate with Engineering and Product:
Partner with engineering teams to review architecture, assess new features, identify security risks, and prioritize improvements without unnecessarily slowing development.
Build Secure-by-Default Solutions:
Develop and improve secure libraries, reusable components, and standardized development practices that prevent recurring vulnerabilities at scale.
Strengthen Application Security:
Configure, optimize, and maintain security tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secrets scanning, to improve detection and reduce false positives.
Lead Security Projects:
Manage cross-functional initiatives from initial scoping through implementation, influencing engineering and product roadmaps while communicating technical risks and recommendations to diverse stakeholders.
Automate Security Operations:
Develop scripts, tools, and automated workflows that expand security coverage, reduce repetitive tasks, and improve the efficiency of security processes.
Support Continuous Improvement:
Apply feedback and lessons learned to refine security practices, evaluate emerging tools, and promote measurable security outcomes.
Champion Security Research:
Participate in the organization's vulnerability discovery and bug bounty ecosystem, testing new approaches and sharing insights that can improve platform security and product capabilities.
Promote Security Awareness:
Help engineering teams adopt secure development practices and integrate security considerations into everyday technical decisions.

Requirements

Professional

Experience:

At least 3 years of experience in product security, application security, or secure software development, with practical experience securing modern applications.
Programming and Automation:
Proficiency in at least one modern programming language, such as Python, Go, Ruby, or Java, with the ability to review code, automate tasks, and build security tools.
Application Security Expertise:
Hands-on experience with threat modeling, secure code reviews, and automated security testing, along with a strong understanding of common vulnerabilities, including the OWASP Top 10.
Security Tooling:
Familiarity with SAST, DAST, SCA, and secrets-scanning solutions, including the ability to improve their effectiveness and integrate them into development workflows.
Project and Stakeholder Management:
Demonstrated ability to lead initiatives, communicate security risks clearly, and influence cross-functional teams across Engineering, Dev Ops, and Product.
Education:

A bachelor's degree in Engineering, Computer Science, or a related discipline, or equivalent practical experience.
Cloud Security (Preferred):
Experience securing cloud-native environments and Infrastructure as Code, including technologies such as Terraform, AWS, GCP, Kubernetes, or Docker.
Bug Bounty Experience (Preferred):
Familiarity with bug bounty programs, vulnerability disclosure processes, or offensive security practices.
Secure Development Enablement (Preferred):
Experience building reusable security libraries, standardized workflows, or secure‑by‑default development solutions that eliminate entire categories of vulnerabilities.
Adaptability and Communication: A proactive, analytical mindset, strong problem‑solving abilities, and the capacity to work effectively in a fast‑paced, collaborative, remote environment.
Industry Experience (Preferred):
Previous experience in a growing cybersecurity, technology, or SaaS organization is an advantage.

Benefits

Remote Work:
Work from home full‑time while collaborating with a distributed team.
Meaningful Impact:
Contribute to improving software security…