Product Security Engineer

Overview: 

You will join our global Product Security team to test our products the way an attacker would — finding real, exploitable risk across web applications, APIs, containers, cloud environments and AI-enabled features, and working with engineering and product teams to get it fixed. You will work across a wide range of products and systems, so you will build breadth quickly, and your findings will directly shape how securely we design and ship. We're looking for someone who tests methodically, communicates findings clearly, and keeps building new skills as attack techniques and AI-assisted tooling evolve.

What you will do:

• Perform hands-on security testing across web applications, APIs, containers, cloud environments (AWS, Azure, GCP) and AI-enabled features, using manual techniques and security tooling to validate real, exploitable risk rather than raw scanner output.
• Prioritize findings by exploitability and business impact rather than automated severity score alone, and track them through to verified remediation and retest.
• Contribute to threat modeling, secure design reviews and architecture discussions early in the development lifecycle, so risks are caught before code ships.
• Assess identity and access control weaknesses, authentication and authorization models, and modern application and cloud architectures for privilege escalation and misconfiguration risk.
• Test AI-enabled features and agentic workflows for prompt injection, tool misuse, excessive agency and other AI-specific failure modes, and frame probabilistic findings as reproducible, actionable reports.
• Partner with engineering and product teams to explain findings clearly, review fixes, and support secure design and development practices.
• Strengthen security across the software delivery lifecycle, including build pipelines, deployment processes and release practices.
• Document findings and recommendations clearly, and support triage of externally reported vulnerabilities alongside the team that owns coordinated disclosure.
• Research emerging attack techniques and AI-assisted testing tools, and apply them to improve testing coverage, consistency and speed without giving up manual validation of what matters.
• Share knowledge across the team to continuously improve how we test, communicate risk and support secure product development.

What we are looking for:

• Education: Bachelor's degree in Computer Science, Information Security or a related field; equivalent practical experience accepted in place of formal education.
• Years of experience: 3+ years of experience performing penetration testing or application security.
• Years of experience needed with specific skills Experience testing across web applications, APIs, containerized deployments and multi-cloud environments (AWS, Azure, GCP), including embedded or agentic AI applications.
• Specific technical or software skills required Demonstrable expertise with tools such as Burp Suite, O