AppOmni · 3 days ago

Lead Product Security Engineer

United States

Full-time

Remote

Senior Level

$212K/yr - $288K/yr

5+ years exp

Maximize your interview chances

Cloud ManagementCloud Security

Insider Connection @AppOmni

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Take ownership role for AppOmni’s Secure SDLC.

Report directly to Engineering leadership.

Focus on design review, code review, and work with Engineering scrum teams as their product security point of contact and security champion.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Cloud security best practicesSecure SDLC frameworksPython 3DjangoDjango Rest FrameworkKubernetesPostgresCI / Github ActionsStaticDynamic analysisGKEFedRAMP complianceData securityTechnical communicationMentoring

Required

Excellent technical and non-technical communication skills

Strong knowledge of cloud security best practices and past professional experience implementing and evangelizing them in support of a SaaS product’s engineering team(s)

Experience mentoring others in security best practices

A collaborative approach to building and living Secure SDLC frameworks as the main Product Security point of contact for multiple engineering teams

Prior hands-on experience reviewing designs and implementations in Python 3

Experience with Django and/or Django Rest Framework

Experience evangelizing and guiding teams through patching requirements in a containerized environment

At least 5 years of experience as a security engineer in product/application security type roles

An interest in data, security, and data security

A knack for designing elegant solutions to complex problems requiring piecing together data from various sources

Preferred

Experience with Kubernetes, GKE, and Postgres

Experience deploying and maintaining security tooling integrated via CI / Github Actions

Experience deploying and maintaining off-the-shelf or custom static and dynamic analysis frameworks with a focus on shifting automated discovery of potential code vulnerabilities left and enabling engineering teams to self-serve

Experience driving and shifting left FedRAMP and other compliance framework-driven engineering and application security requirements