Staff Security Engineer, Product & Platform Security

You will lead product and platform security initiatives across services, cloud platforms, GPU clusters, and critical infrastructure. You will perform security reviews and threat models, validate and prioritise vulnerabilities, coordinate remediation, support incident workflows, and measure security improvements across the product lifecycle.

Responsibilities

• Perform vulnerability assessments, application-security reviews, and testing of core services, APIs, and consoles
• Conduct threat modeling and architecture reviews for products, features, services, and platform changes
• Provide guidance on secure design, coding, authentication, authorization, data protection, and infrastructure security
• Develop reusable security standards, patterns, and guardrails
• Receive, analyse, validate, and prioritise vulnerability findings using CVSS and business impact
• Coordinate reproduction, validation, remediation roadmaps, and resolution tracking with engineering stakeholders
• Identify recurring vulnerability patterns, systemic risks, and technical debt
• Support incident classification, escalation, responsible disclosure, root-cause analysis, and process improvement
• Document findings, remediation steps, lessons learned, and records for audit and compliance
• Track security KPIs, analyse vulnerability trends, report risks, and recommend program improvements

Requirements

• 10+ years of information-security experience with substantial hands-on experience in product security, application security, platform security, or vulnerability management
• Background in product security, application security, and penetration testing
• Expertise in threat modeling, security architecture, vulnerability assessment, and secure coding
• Experience embedding security throughout the development lifecycle with software, platform, and infrastructure engineering teams
• Knowledge of CVSS scoring, vulnerability prioritization, and risk quantification
• Experience with responsible disclosure frameworks, bug bounty programs, and multi-stakeholder remediation
• Experience with GPU, HPC, or cloud infrastructure security, including AWS, GCP, or Azure
• Knowledge of Kubernetes, container security, APIs, identity and access management, and hybrid-cloud architectures

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Flexible paid time off
• Parental leave
• Retirement plan participation