Match score not available

Sr. Product Security Engineer

extra holidays - extra parental leave
Remote: 
Full Remote
Contract: 
Experience: 
Senior (5-10 years)
Work from: 
Minnesota (USA), United States

Offer summary

Qualifications:

5+ years of experience in product security, Deep expertise in secure product development, Strong understanding of information security best practices, Experience with security assessments and threat modeling.

Key responsabilities:

  • Implement product security procedures aligned with business objectives
  • Collaborate with teams to integrate security controls in the software development life cycle
Perforce Software logo
Perforce Software Large http://www.perforce.com/
1001 - 5000 Employees
See more Perforce Software offers

Job description

Perforce is a community of collaborative experts, problem solvers, and possibility seekers who believe work should be both challenging and fun. We are proud to inspire creativity, foster belonging, support collaboration, and encourage wellness. At Perforce, you’ll work with and learn from some of the best and brightest in business. Before you know it, you’ll be in the middle of a rewarding career at a company headed in one direction: upward.  
  
With a global footprint spanning more than 80 countries and including over 75% of the Fortune 100, Perforce Software, Inc. is trusted by the world’s leading brands to deliver solutions for the toughest challenges. The best run DevOps teams in the world choose Perforce.  

Position Summary:

The Head of Product Security for the Information Security Team at Perforce is searching for a Sr. Product Security Engineer to join the team.  As a Senior Product Security Engineer, you will play a crucial role in ensuring the security of our products throughout their lifecycle. You will work closely with product and engineering teams to integrate security controls at every stage of the software development process. This role demands a hands-on approach to cultivate a culture of security within our development teams, focusing on secure development, DevSecOps practices, and shift-left security principles.

Responsibilities:
  • Mature and implement product security procedures aligned with the company's business objectives.
  • Collaborate with product and engineering teams to integrate security controls at every stage of the software development life cycle.
  • Conduct thorough code reviews to identify and remediate security vulnerabilities.
  • Perform regular testing to assess the security posture of our products and infrastructure.
  • Develop and maintain threat models to identify potential security risks and guide mitigation efforts.
  • Continue to foster a culture of security awareness, including the education and training of developers on secure coding practices.
  • Drive the adoption of automated security tools and processes to enable shift-left security practices.
  • Conduct regular risk assessments and audits to ensure compliance with internal and external security standards.
  • Participate in incident response and retrospective activities, ensuring that lessons learned are incorporated into product development practices.
  • Communicate effectively with teams, management, and clients about security concerns and best practices.
  • Assist in the management of third-party risks by tracking vulnerability assessment results and ensuring effective remediation.
  • Monitor advancements in information security technologies and programmatically incorporate them into the internal environment.

  • Requirements:
  • 5+ years of experience in product security, with a deep expertise in secure product development.
  • Experience with security assessments, security design reviews, or threat modeling.
  • Strong understanding of security engineering, information security best practices, and DevOps.
  • Excellent communication skills, with the ability to influence others.
  • Experience in risk assessment, threat modeling, code review, data analysis, or static code analysis 
  • Ability to lead cross functional project teams in a technical capacity or lead technical risk analysis in an enterprise environment.
  • Come work with us! Our team members are valued for their contributions, introduced to new opportunities, and rewarded well. Perforce combines the experience and rewards of a start-up with the security of an established and privately held profitable company.
     
    If you are passionate about the technology that impacts our day-to-day lives and want to work with talented and dedicated people across the globe, apply today!
     
     
    Perforce Software is an Equal Opportunity Employer that does not discriminate on the basis of actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, pregnancy-related conditions, and lactation), gender identity or expression (including transgender status), sexual orientation, marital status, family or relationship structure, military service and veteran status, physical or mental disability, genetic information, gender identity, or any other characteristic protected by applicable federal, state, or local laws and ordinances. Perforce Software's management team is dedicated to this policy with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, employee activities, access to facilities and programs, and general treatment during employment.

    Required profile

    Experience

    Level of experience: Senior (5-10 years)
    Industry :
    Spoken language(s):
    English
    Check out the description to know which languages are mandatory.

    Other Skills

    • Collaboration
    • Communication

    Security Engineer Related jobs