Description
Bright Data is seeking a highly experienced Senior Product Security Engineer to join our growing Information Security team.
This is a founding, high-impact role as the company’s sole Product Security authority, responsible for building and shaping the product security domain from the ground up.
You’ll define and implement security standards across our entire product portfolio, ensuring consistency at scale.
We’re looking for someone who combines strategic thinking with hands-on execution, and is driven to embed security deeply across R&D, DevOps, and Product.
Responsibilities
- Drive the integration of security controls and best practices in the software development lifecycle.
- Lead secure product design, embedding security principles from the beginning stages.
- Conduct security code reviews and reduce vulnerabilities alongside R&D teams.
- Manage and optimize the Web Application Firewall (WAF) for threat protection.
- Collaborate on penetration test remediation, ensuring effective resolutions.
- Implement and enforce API security standards.
- Establish and maintain development guidelines for secure practices.
- Support and enhance the bug bounty program.
- Provide guidance and mentorship on secure coding and application security
Requirements
- 5+ years in application security, ideally within a Product/SaaS/Security company.
- Software development experience with strong programming knowledge, especially in JS and ideally PHP, TypeScript, Rust, C#, Python, React, Swift, or Java.
- Expertise in secure coding principles and common vulnerabilities (OWASP Top 10), and exploitation techniques.
- Experience with DAST/SAST tools and security integration in CI/CD pipelines.
- Strong understanding of AWS cloud security principles.
Preferred:
- Bachelor's in Computer Science, Information Security, or related field.
- Cyber security certifications.
- Experience with Kubernetes and container security.
- Familiarity with GitLab and CVS.
