Senior Product Security Engineer

Senior Product Security Engineer

• This position will be an advocate for security throughout the product and engineering processes defining security expectations, verifying security controls, and providing training and awareness.
• You will have the opportunity to work with product and engineering leaders to identify security weaknesses and security features that can will help protect customers and drive customer adoption of SmartBear products
• You will work with a variety of languages including Go, Java, Node.js, React JS, Ruby, Python, and many more leveraging the latest tools designed and built in the cloud.

Team Intro

The Product Security team covers over 25 existing products with more on the horizon.  The collection of products range from home grown to acquired products creating complex and challenging processes allowing for expanded growth and learning opportunities every day. 

About the role

As a Senior Product Security Engineer at SmartBear, you will: 

• Join a collaborative Product Security team while being embedded in engineering and product groups to develop deep understanding of product priorities, architecture, and delivery timelines to drive security at the right stages of the SDLC.
• Partner closely with engineering teams, architects, and product leaders to validate the security posture of new and existing features prior to production deployment.
• Lead and champion security-by-design practices, influencing secure architecture decisions, improving engineering processes, and scaling secure development training.
• Perform advanced Security Reviews including threat modeling, secure code reviews, penetration testing, and architectural risk assessments.
• Own vulnerability triage and validation workflows, serving as a trusted Subject Matter Expert to engineering teams in identifying practical mitigation and remediation solutions.
• Communicate security risks effectively to product owners and stakeholders, provide meaningful recommendations, and verify issues are remediated through to closure.
• Contribute to the evolution of SmartBear’s Product Security program through automation, metrics, and continuous improvement initiatives.

We are looking for you if you have:

• 6+ years of experience in Product Security, Application Security, or Secure Software Engineering.
• Proven experience supporting SaaS software delivery in public cloud environments (AWS, Azure, or GCP).
• Expertise conducting threat modeling, secure design reviews, and code reviews across Web, API, and cloud-native services.
• Strong development background in one or more modern programming languages (Java, Go, Python, JavaScript, etc.).
• Working knowledge of modern security tooling such as SAST, DAST, SCA, IaC scanning, CSPM, and CI/CD security integrations.
• Ability to influence engineering teams, communicate risk clearly, and drive security improvements at scale.

Why you should join the SmartBear crew:

• You can grow your career at every level.
• We invest in your success as well as the spaces where our teams come together to work, collaborate, and have fun.
• We love celebrating our SmartBears; we even encourage our crew to take their birthdays off.
• We are guided by a People and Culture organization - an important distinction for us. We think about our team holistically – the whole person.
• We celebrate our differences in experiences, viewpoints, and identities because we know it leads to better outcomes.

Did you know?

• Our main goal at SmartBear is to make our technology-driven world a better place.
• SmartBear is committed to ethical corporate practices and social responsibility, promoting good in all the communities we serve.
• SmartBear is headquartered in Somerville, MA with offices across the world including Galway Ireland, Bath, UK, Wroclaw, Poland, Ahmedabad and Bangalore India.
• We’ve won major industry (product and company) awards including B2B Innovators Award, Content Marketing Association, IntellyX Digital Innovator and Built-in Best Places to Work.

SmartBear is committed to creating an inclusive workplace for employees where all individuals are treated with respect and dignity. We are an equal opportunity employer and make employment decisions based on merit, qualifications, and business needs. We do not discriminate on the basis of race, color, religion, sex, national origin, age, gender, disability, veteran status, sexual orientation, or any other protected status under applicable laws. We are dedicated to fostering a workplace that reflects a diversity of thought and experience as well as our values of being smart, open, driven, accountable, and curious. 

#LI-AC2