Senior Product Security Engineer - Remote

Overview

ExtraHop is on a mission to help organizations achieve complete visibility, real-time threat detection, and proactive security through cutting-edge network detection and response (NDR) technology. We are seeking a Senior Product Security Engineer to build and operate product security program capabilities, tools, and processes.

In Short

• Define standards for secure development and configuration of application and infrastructure components.
• Perform threat modeling, security design reviews, and code reviews.
• Implement and manage vulnerability scanning tools.
• Conduct manual pen testing and lead red team exercises.
• Coordinate third-party pentesting and bug bounty programs.
• Triage vulnerability findings and recommend remediation actions.
• Develop and deliver training on secure development standards.
• Participate in security incident response activities.
• Support security compliance and certifications programs.
• Participate in an on-call rotation for security detections.

Requirements

• Bachelor’s degree or equivalent experience in computer science or related field.
• 8+ years of experience in security engineering and software development.
• Experience securing cloud-based web applications and APIs.
• Knowledge of software security vulnerabilities and best practices.
• Solid knowledge of Git.
• Experience with container-based environments.
• Experience with AWS cloud platform.
• Must be a U.S. citizen.

Benefits

• Health, Dental, and Vision Benefits.
• Flexible PTO and Sick Time.
• 401k with Employer Match.
• Educational Reimbursement.
• Hybrid and Remote Work Model.