Senior Product Security Engineer

BeyondTrust

. Build and maintain the product security tooling pipeline across the software development lifecycle .

Posted 9/28/2026full-timeRemote • CanadaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Application Security and Product Security with a strong focus on building and maintaining security tooling within CI/CD pipelines. Proficient in implementing AI-powered security tools and integrating security controls into development workflows.

Highest-signal resume keywords

Application SecurityDevSecOpsCI/CD Pipeline ArchitectureAI-Powered Security ToolingSAST/DAST/SCA Implementation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Tooling ConfigurationVulnerability DetectionPolicy-as-CodeScriptingWorkflow OrchestrationContainer Security ScanningCloud Security FundamentalsRisk ClassificationRemediationIncident Response

Soft Skills

CollaborationCommunicationAutomation-First Mindset

Tools & Technologies

Claude Code SecurityCodex SecurityGitHub Advanced SecurityCodeQLDependabotWiz CLI

Industry Keywords

Security EngineeringSecurity Control IntegrationFinding TriageSeverity AssessmentPost-Incident Improvements

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Build and maintain the product security tooling pipeline across the software development lifecycle
Implement and tune Claude Code Security, Codex Security, GitHub Advanced Security, and Wiz CLI across repositories and CI/CD pipelines
Configure policies and continuously improve security tooling for accurate, actionable feedback
Design and operate automated product security review workflows with human-in-the-loop checkpoints
Use Claude and LLM platforms for review triage, risk classification, recommendation generation, vulnerability detection, fix suggestions, policy enforcement, and summarization
Integrate security tooling into GitHub PRs, CI/CD pipelines, IDE plugins, and developer dashboards
Reduce false positives and build feedback loops to improve findings
Support product incident response, investigation, impact scoping, emergency fixes, root cause analysis, and post-incident improvements
Partner with Security Testers, Architects, the TPM, and engineering teams
Provide security tooling configuration, troubleshooting, and support to engineering teams

Requirements

What you’ll need

4+ years in Application Security, Product Security, DevSecOps, or Security Engineering with hands-on experience building and operating security tooling in CI/CD pipelines
Experience implementing and tuning SAST, DAST, SCA, and secret scanning tools in GitHub-integrated environments (GitHub Advanced Security, CodeQL, Dependabot, or equivalent)
Hands-on experience with AI-powered security tooling such as Claude Code Security, Codex Security, or similar LLM-based code analysis platforms
Strong understanding of CI/CD pipeline architecture and security-control integration
Experience with scripting, pipeline configuration, policy-as-code, webhook integrations, and workflow orchestration
Familiarity with container security scanning tools and cloud security fundamentals
Understanding of common vulnerability classes, finding triage, severity, and remediation
Strong collaboration and communication skills
Automation-first mindset

Benefits

Comp & perks

Culture of flexibility, trust, and continual learning
Growth recognition and opportunities for continual learning
Diversity and inclusion-focused workplace culture
Employee care and support