Senior Product Security Engineer

Harness

. Design and develop product security APIs, tools, and utilities for internal and external stakeholders .

Posted 10/13/2026full-timeRemote • United StatesSenior💰 $150,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and developing product security APIs and tools, conducting threat modeling, and implementing security practices within the software development lifecycle. Proficient in utilizing security frameworks and tools to enhance application security and collaborate effectively with cross-functional teams.

Highest-signal resume keywords

Product Security API DevelopmentDevSecOps PracticesSecure SDLC MethodologiesSecurity Testing ToolsCloud Environment Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Java ProgrammingObject-Oriented ProgrammingThreat ModelingPenetration TestingVulnerability ManagementSecurity ArchitectureAPI DevelopmentCI/CD IntegrationSAST ToolsDAST Tools

Soft Skills

ConsultationCollaborationAdvisory Skills

Tools & Technologies

KubernetesAWSGCPAzureOWASPSANSNISTCIS

Industry Keywords

Cyber Security FrameworksSoftware Supply Chain RisksSecurity StandardsVulnerability RemediationCloud-Native Environment

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformJavaKubernetesSDLC

About the role

Key responsibilities & impact

Design and develop product security APIs, tools, and utilities for internal and external stakeholders
Conduct threat modeling and secure design reviews for application backend services and business integrations
Perform advanced penetration tests and adversarial attack simulations against Harness modules, APIs, and codebase using industry-standard frameworks
Lead manual and automated code review efforts to discover vulnerabilities, weaknesses, and anti-patterns in the Harness platform
Implement and operate security tooling including SAST, DAST, and SCA, and integrate these into CI/CD pipelines
Consult and advise developers and Product Managers on security standards, vulnerability remediation, and security architecture
Assess risks and trade-offs, and propose solutions for product security features such as authentication and authorization
Participate in the creation, review, and implementation of technical security standards across global engineering teams
Use the Harness platform to integrate security processes like vulnerability management into the SDLC
Collaborate cross-functionally with Engineering and Product to accelerate the release of software with security by design

Requirements

What you’ll need

BS in Computer Science or a related degree
5+ years of relevant industry experience with a strong security focus
Solid experience with DevSecOps practices and secure SDLC methodologies
Good working knowledge of cyber security frameworks including OWASP, SANS, NIST, and CIS
Ability to describe software supply chain risks and Secure SDLC best practices
Experience with public or private cloud environments such as K8s, AWS, GCP, or Azure
Professional knowledge of enterprise applications, API development, and modern software delivery processes
Previous experience in a cloud-native environment
Proficiency in Java or a comparable language and object-oriented programming methodology
Hands-on experience with security testing tools and vulnerability management workflows