Staff Product Security Engineer

About the role

SailPoint's Cybersecurity organization is looking for a Product Security Engineer who combines strong application security expertise with practical software engineering experience. The role reports to the Director of Cyber Product Security and works with Engineering and other security teams to identify risks, drive remediation and embed security throughout product development. It is fully remote, with the option to work from anywhere in the continental United States.

Key responsibilities

• Partner with Engineering teams to identify and mitigate security risks and implement secure deployment practices
• Support threat modeling and help teams implement appropriate security controls
• Define and promote secure coding standards, policies, best practices and secure-by-design principles
• Improve security testing programs and coordinate internal and external application and penetration testing
• Validate vulnerability findings, prioritize remediation, perform root cause analysis and recommend long-term improvements
• Work with Security Operations on monitoring and detection, and triage bug bounty disclosures
• Develop security training, guidance and documentation, and act as a security consultant for other organizations

Required profile

• 4-5 years of experience in product security, application security, software engineering or a related field
• Ability to influence engineering organizations and drive security initiatives across teams
• Strong analytical and problem-solving skills, good communication skills and a continuous learning mindset

Required skills

• Security testing tools such as SAST, SCA, DAST and container security scanners
• CI/CD security controls and DevSecOps practices
• Familiarity with at least one programming language (Python, Go, Java, JavaScript/TypeScript, Ruby)
• Use of AI-powered tools and knowledge of AI security risks and frameworks (OWASP AI Security and Privacy Guide, NIST AI RMF, CAI, Open SSF AI/ML Security Framework strongly preferred)

What we offer

• Eligibility for the SailPoint Corporate Bonus Plan or a role-specific commission, and potential equity participation
• Base salary for US-based employees within a stated range