Staff Product Security Engineer

About the role

We are seeking a Staff Product Security Engineer to lead the security posture of our cloud‑based Altium 365 platform. In this senior role you will ensure that both existing features and new releases remain robust against threats, driving continuous vulnerability discovery and prevention.

Key responsibilities

• Design, implement and maintain security regression test suites covering critical application flows and integrate them into CI/CD pipelines.
• Lead structured threat‑modeling sessions for existing components and upcoming features, translating identified threats into test cases, security requirements and mitigation plans.
• Conduct manual and automated offensive security (Red Team) activities, focusing on high‑impact vulnerabilities and validating exploitability.
• Continuously assess the platform against the OWASP Top 10, uncovering logic flaws and abuse paths beyond standard tooling.
• Review new product changes for security risks, ensuring they are threat‑modeled, covered by regression tests and released without bottlenecks.
• Collaborate with engineering, architecture and SRE teams to embed secure‑by‑design practices and provide guidance on fixing vulnerabilities.

Required profile

• 5+ years of hands‑on experience in application or product security.
• Strong background in web and API security testing, threat modeling and offensive security techniques.
• Deep knowledge of the OWASP Top 10 and ability to translate it into actionable testing strategies.
• Bachelor’s degree or equivalent experience.

Required skills

• Web application security testing
• API security testing
• Threat modeling methodologies
• OWASP Top 10 expertise
• Security regression testing
• CI/CD pipeline integration
• Red Team / offensive security testing