Apply on Employer Site

Mattermost · 2 hours ago

Senior Product Security Engineer

United States

Full-time

Remote

Senior Level

$135K/yr - $175K/yr

5+ years exp

Mattermost is a leading collaborative workflow solution provider for critical infrastructure organizations. The Senior Product Security Engineer will ensure the security of products and services, implement security tooling, and coordinate with stakeholders throughout the software development life cycle.

File SharingInformation ServicesInformation TechnologyMessagingSaaSSoftware

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Support the application vulnerability management and mitigation approaches

Conduct application security reviews through manual code review or static/dynamic code analysis

Engage in threat modeling and design reviews of in-house developed software components

Provide security guidance and training to internal development teams

Triage SCA findings and support internal development teams in SCA findings remediation

Improve and/or automate existing processes to increase efficiency

Qualification

Application securitySecure software developmentThreat modelingStatic/dynamic analysisProgramming languagesResourcefulnessOpen source experienceBug bounty experiencePenetration testing certificationsElectron experienceReact experienceCTF participationCommunicationTeamwork skills

Required

BS in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent experience, with 5+ years of relevant experience in application security, secure software development, or penetration testing

Deep understanding of web application security and secure development practices

Deep understanding with common security libraries, security controls, and common security flaws

Experience with Threat Modeling applications

Experience with static/dynamic analysis, and common exploit methods

Experience in one or more programming languages, ideally Go or Javascript

Excellent written and verbal communication skills

Demonstrable teamwork skills and resourcefulness

For candidates residing in the U.S.: This role may require the ability to obtain and maintain a U.S. government security clearance in the future. As such, U.S. applicants must be U.S. citizens and eligible under applicable clearance requirements

Applicants must meet eligibility requirements for access to export-controlled information as defined by U.S. export control laws, including EAR and ITAR