Security Engineer Job Redwood City area,California USA,IT/Tech

Position: Staff Security Engineer

Delinea is seeking an experienced Principal/Staff-level Product Security Engineer to lead Product Security Program strategy and execution.

Responsibilities

Provide strong leadership and serve as a security thought leader across Delinea product offerings
Assess the current product security program state and partner to define future state and multi-year roadmaps
Drive strategic security direction and influence security architecture adoption in product strategy and roadmap
Advise on secure design for Delinea products and services using product security best practices and industry trends
Conduct end-to-end security architecture reviews and leverage AI capabilities to augment team coverage
Perform threat modeling and assess/document product risks and application designs
Participate in expanding and maturing the S-SDLC program
Stay current on the threat landscape, technologies, security compliance requirements, standards, and industry trends
Develop baseline cloud, container, application, and infrastructure security standards and integrate them into CI/CD
Automate operational activities that maintain product and cloud security infrastructure
Respond to security incidents and, when appropriate, resolve or escalation
Mentor and guide Product Security team members
Implement organizational policies and standards for product and cloud security
Partner with other teams to integrate cloud security best practices
Participate in security audits, discuss application and cloud security, and support responses to customer security inquiries

Requirements

Bachelor’s degree in Computer Science, Information Security, or similar related field (or equivalent experience)
12 years of professional work experience in cybersecurity
7+ years in a Product Security role including Security Architecture, Threat Modeling, Secure Design, App Sec tooling, and related work
Strong knowledge of the current Product Security threat landscape and industry best practices
Experience performing Threat Modeling and Product Security design reviews, integrated into SSDLC processes
Experience with Cloud Security
Experience with Cryptography
Experience with Secure Design reviews and Threat Modeling
Experience with SaaS multi-tenant product architecture
Experience with REST APIs
Experience with Containers (Docker, Kubernetes, or similar)
Experience integrating security testing tools into development pipelines
Experience with defect tracking (Jira, Bugzilla, Service Now, or similar)
Experience with source code management (ADO, Git Lab, Git Hub, or similar)
Experience with application security testing tools (SAST, DAST, IAST, SCA, or similar)
Strong leadership, communication, and interpersonal skills; able to influence stakeholders at all levels
Strong analytical skills to prioritize, manage competing demands, and meet deadlines
Strong verbal and written communication skills, including explaining technical security issues in plain language

Technologies

Benefits

We’d Love to See

Experience leveraging AI capabilities to automate and augment Product Security tasks such as Threat Modeling and Secure Design reviews
Strong understanding of cybersecurity frameworks, risk management principles, and industry standards (e.g., NIST, ISO 27001, CIS, GDPR)
Solid understanding of cloud security technologies including container security, serverless security, network and application security, and access management
Software engineering and/or development experience
Cybersecurity certifications (e.g., CISSP, CSSLP, CISM, or similar)
Proficiency with Azure and AWS

Location and Compensation

Company Context

Core Values