Staff Product Security Engineer

About the role

We are looking for a Senior Product Security Engineer to strengthen our product security capability, focusing on continuous vulnerability discovery and prevention for Altium 365, our cloud platform for electronics design.

Key responsibilities

• Build and execute security regression testing, integrating test suites into CI/CD pipelines and defining coverage targets for critical areas.
• Lead threat modeling sessions for existing components and new features, translating threats into test cases, security requirements and mitigation plans.
• Conduct offensive security activities, including manual and automated red‑team style testing, to validate exploitability and business impact.
• Continuously assess the platform against the OWASP Top 10, uncovering logic flaws and abuse paths beyond standard tooling.
• Review product changes for security risks, ensuring they are threat‑modeled, covered by regression tests and act as a security gatekeeper without creating bottlenecks.

Required profile

• 5+ years of experience in application or product security, with strong hands‑on expertise in web application security testing, API security and threat modeling.
• Deep knowledge of the OWASP Top 10 and ability to identify business‑logic vulnerabilities.
• Experience integrating security testing into CI/CD pipelines and working with multi‑tenant, cloud‑native systems.

Required skills

• Web application security testing (manual penetration testing, DAST/SAST)
• API security
• Threat modeling methodologies
• CI/CD security integration
• Understanding of authentication, authorization, session management, multi‑tenant architectures
• Cloud platforms (AWS) and identity federation (SSO, MFA)