Remote Sr. Product Security Engineer

Description:

• Perforce is seeking a Sr. Product Security Engineer to join the Information Security Team.
• The role involves ensuring the security of products throughout their lifecycle.
• Responsibilities include maturing and implementing product security procedures aligned with business objectives.
• The engineer will collaborate with product and engineering teams to integrate security controls at every stage of the software development life cycle.
• Conducting thorough code reviews to identify and remediate security vulnerabilities is a key task.
• Regular testing will be performed to assess the security posture of products and infrastructure.
• The engineer will develop and maintain threat models to identify potential security risks and guide mitigation efforts.
• Fostering a culture of security awareness through education and training of developers on secure coding practices is essential.
• The role includes driving the adoption of automated security tools and processes to enable shift-left security practices.
• Conducting regular risk assessments and audits to ensure compliance with internal and external security standards is required.
• Participation in incident response and retrospective activities is expected to incorporate lessons learned into product development practices.
• Effective communication with teams, management, and clients about security concerns and best practices is crucial.
• The engineer will assist in managing third-party risks by tracking vulnerability assessment results and ensuring effective remediation.
• Monitoring advancements in information security technologies and incorporating them into the internal environment is part of the role.

Requirements:

• Candidates must have 5+ years of experience in product security, with deep expertise in secure product development.
• Experience with security assessments, security design reviews, or threat modeling is required.
• A strong understanding of security engineering, information security best practices, and DevOps is necessary.
• Excellent communication skills are essential, with the ability to influence others.
• Experience in risk assessment, threat modeling, code review, data analysis, or static code analysis is needed.
• The ability to lead cross-functional project teams in a technical capacity or lead technical risk analysis in an enterprise environment is required.

Benefits:

• Perforce values team members for their contributions and introduces them to new opportunities.
• Employees are rewarded well for their work.
• The company combines the experience and rewards of a start-up with the security of an established and privately held profitable company.
• Employees will have the opportunity to work with talented and dedicated people across the globe.
• Perforce Software is an Equal Opportunity Employer, ensuring a non-discriminatory work environment.