Define and lead product security strategy, secure development practices, architecture reviews, threat modeling, and security testing across applications, APIs, microservices, and cloud-native products. Integrate security into development and cloud operations, and lead vulnerability management, SOC monitoring, threat hunting, incident response, and security maturity improvements.
Position: Product Security Lead Location: REMOTE Duration: Long Term Contract
Experience: 10+ Years in Information Security with strong expertise in Product Security, DevSecOps, Security Operations (SecOps), and SOC Operations.
Role Summary: Candidate will possess deep expertise in secure software development, application security, cloud security, DevSecOps automation, threat modeling, vulnerability management, incident response, and SOC operations. This role will work closely with Engineering, Product Management, DevOps, Infrastructure, and Security teams to build secure products and establish a mature security posture across the organization.
Key Responsibilities:
Product Security Define and implement product security strategy and roadmap. Conduct security architecture reviews and threat modeling exercises. Perform secure design reviews for applications, APIs, microservices, and cloud-native products. Establish and enforce secure SDLC (SSDLC) practices. Drive application security assessments including: SAST DAST IAST Software Composition Analysis (SCA) API Security Testing Penetration Testing Review and remediate findings from security assessments. Establish product security standards aligned with industry frameworks. DevSecOps Integrate security controls into CI/CD pipelines. Automate security testing and compliance checks. Implement security gates and policy enforcement within development workflows. Support container and Kubernetes security initiatives. Secure cloud deployments across AWS, Azure, and GCP. Define Infrastructure-as-Code (IaC) security controls. Drive secrets management and secure configuration practices.
Security Operations (SecOps) Lead vulnerability management programs. Develop risk-based remediation strategies. Manage security monitoring and incident response activities. Collaborate with infrastructure and engineering teams for security hardening. Lead root cause analysis and post-incident reviews. Maintain security metrics and reporting dashboards. SOC Oversee SOC monitoring and alert triage processes. Develop and optimize SIEM detection use cases. Lead threat hunting initiatives. Manage incident response lifecycle: Detection Analysis Containment Eradication Recovery Drive EDR/XDR implementation and enhancement activities. Improve SOC maturity through automation and process optimization.
Qualifications Required: Bachelor's degree in Computer Science, Information Security, or related field. 10+ years of Cybersecurity experience. 5+ years in Product Security or Application Security leadership roles. Experience managing security teams and cross-functional stakeholders. Hands-on experience with cloud-native and SaaS environments. Preferred Certifications CISSP CSSLP CCSP AWS Security Specialty Azure Security Engineer Associate
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
