product security engineer

Cartamundi East Longmeadow LLC

<div>Join the worldwide leader in playing cards and in &ldquo;play&rdquo; solutions. Play is what keeps us going, and it always has been our greatest motivation. That's why we live different, play different.
We are seeking an experienced Product Security Engineer to safeguard the confidentiality and integrity of intellectual property related to Cartamundi&rsquo; s collectible trading card products. This role combines legal knowledge, technical expertise, and operational oversight to prevent theft, counterfeiting, and unauthorized use of proprietary assets across both physical and digital environments.
What you&rsquo;ll do as a Product Security Engineer:<div><ul><li>
Ensure product security throughout the product lifecycle, including file transfer portals, internal databases, and production floors.</li><li>
Implement and enforce group security policies, standards, controls and best practices, to prevent product leaks and theft.</li><li>
Conduct risk assessments and implement corrective and preventive actions across all production and supply chain touchpoints.</li><li>
Collaborate with internal teams and subcontractor partners to ensure compliance with Cartamundi&rsquo;s security standards.</li><li>
Monitor and audit the local security systems and processes, ensuring continuous improvement and alignment with industry best practices.</li><li>
Develop and maintain security metrics and dashboards to measure and report product and platform security performance</li><li>
Manage the local security systems (CCTV, access control, intrusion detection); periodically review logs and events to identify production floor risks</li><li>
Create a strong product security focus in the local company culture and educate external partners on product security procedures.</li><li>
Continuously monitor emerging product ‑security threats, vulnerabilities, and attack vectors, and translate insights into actionable recommendations for Group Product Security team.</li><li>
Align with Group Product Security leadership and support continuous improvement initiatives</li><li>
In partnership with the Group Product Security team, lead local investigations into suspected breaches, counterfeiting, or IP theft, analyze root causes, and lead incident response and mitigation efforts</li><li>
Be the local single point of contact/expert for all local security related matters.</li><li>
Coordinate with Legal, law enforcement and external agencies when required</li></ul></div>
We&rsquo;re looking for an IP &amp; Product Security Engineer with:<div><ul><li>
5&ndash;8+ years in manufacturing security, loss prevention, or physical IP protection</li><li>
Proven experience in security management, preferably in a manufacturing or product security-sensitive environment.</li><li>
Bachelor/Master in IT, engineering, product security or equal through experience.</li><li>
Additional certificates like CISSP / CISM / CISA, ASIS CPP/PSP, TAPA-knowledge are a plus.</li><li>
Knowledge of access control, CCTV, camera legislation, track &amp; trace, anti‑theft designs</li><li>
Strong understanding of physical and digital security systems, risk management, and compliance frameworks.</li><li>
Excellent analytical, investigative, and problem-solving skills</li><li>
Ability to work internationally, cross-functionally and manage external partners.</li></ul></div>
Ability to work internationally, cross-functionally and manage external partners.
 Benefits a Product Security Engineer can expect from Cartamundi:<ul><li>
Climate controlled facility</li><li>
401(k) with company match</li><li>
Health, dental, and vision insurance starting day one</li><li>
HSA (Health Savings Account) and FSA (Flexible Savings Account)</li><li>
Life insurance</li><li>
Short-Term and Long-Term Disability</li><li>
Paid time off</li><li>
Tuition reimbursement</li><li>
Employee discounts on daycare, gym memberships, travel, and much more</li></ul>
Physical Requirements and Working Conditions:
 The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation(s). Our manufacturing Plant is comprised of enclosed office and manufacturing space. This position requires the ability to:<ul><li>
Work effectively with other team members, through use of verbal and written communication, including typing, through use of fingers on a keyboard.</li><li>
May need to perform sedentary work, sitting for long periods of time) on various computer systems</li><li>
This Product Security Engineer position is located in our East Longmeadow, MA facility</li></ul>
Apply today and discover the magic of making a difference at Cartamundi!
Cartamundi does not discriminate based on race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities. This employer participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. For more information on E-Verify, or if you believe that your employer has violated its E-Verify responsibilities, please contact DHS dhs.gov/e-verify.
Candidates must be 18 years old to work for Cartamundi. No agencies please. No sponsorship available.
About Cartamundi:
At Cartamundi, we're all united by our common belief that world is better with play. Play is what keeps us going, and it always has been our greatest motivation. That's why we live different and play different. To us, it is not just an activity. It is a guiding mindset that reminds us to have fun, to be fair, to connect with people &ndash; across cultures and generations &ndash; and to embrace shared experiences.
We are a worldwide leader in playing cards and in &ldquo;play&rdquo; solutions.
Our owned brand portfolio includes a suite of heritage brands which go back as far as 1848, including global brands like Bicycle&reg;, HRO&reg;, Bee&reg;, Copag&reg;, Shuffle&reg; and many locally loved brands. These brands combine craftsmanship with innovation as the basis for their continued relevance and positive contribution to the local communities that love and use these brands.
At Cartamundi, we have significant expertise in printing; our presses have been running since 1765. Today, our company has become the largest playing cards and board game manufacturer in the world and the trusted partner of leading toy companies. We make well-known brands such as Monopoly&reg;, Uno&reg;, Magic: The Gathering&reg;, Guess Who &reg;, Pok&eacute;mon&reg;, Trivial Pursuit&reg; every day.
As we look into the future and how entertainment evolves, we are bringing the digital world to the physical world and vice versa. We have a dedicated team of experts that is looking into future technologies, products, and applications that can get our consumers and communities to truly live different and play different.
We are still a family-owned company with headquarters in Belgium and have a global network of 16 manufacturing facilities, 6 design centers, 1 digital studio and 1 global R&amp;D center.</div>

Product Security Engineer

BeyondTrust

<div>BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio.

Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.

The Role

We're hiring a Sr Product Security Engineer to do deep, hands-on security testing across BeyondTrust's product portfolio using AI as a force multiplier. You'll use Claude, Codex, and LLM-driven workflows to build threat hunting skills, develop fuzz factory plugins, and perform context-rich penetration testing that goes beyond what scanners and checklists catch.

This is a technical role. You'll discover vulnerabilities, build proof-of-concept exploits, validate findings, and work with engineering to remediate them. You'll also partner closely with Security Architects and Cyber Defense to turn offensive findings into defensive mechanisms: detection signatures, monitoring rules, and hardening guidance informed by real exploitation paths you've validated firsthand.

Our Product Security organization operates AI-first. You'll leverage Claude and Codex daily to automate repetitive testing workflows, generate targeted fuzz inputs, build custom security tooling, analyze code paths at scale, and produce exploit PoCs faster than manual methods allow. You'll also contribute back to the team by building reusable skills, prompts, and plugins that make everyone's testing more effective.

What You'll Do
<ul>
<li>AI-Driven Security Testing &amp; Vulnerability Discovery Perform deep, context-aware penetration testing of web applications, APIs, endpoint agents, thick clients, identity systems, and cloud-native services. Use Claude and Codex to analyze code paths, trace data flows, identify attack surfaces, and generate targeted test cases that reflect how the product works, not generic payloads against generic endpoints.</li>
<li>Threat Hunting Skills &amp; Fuzz Factory Plugins Build AI-powered threat hunting skills and fuzz factory plugins using Claude and Codex. Develop custom fuzzers that understand product-specific protocols, input formats, and business logic. Create reusable skills and agent workflows that automate discovery of vulnerability classes across the product portfolio: injection paths, auth bypass patterns, privilege escalation chains, and cryptographic weaknesses.</li>
<li>Proof-of-Concept Exploit Development Develop working proof-of-concept exploits for discovered vulnerabilities that demonstrate real impact in the product's deployment context. Use Claude and Codex to accelerate exploit development, generate payloads, and validate exploitation chains. A validated PoC with clear impact drives remediation; an unvalidated scanner finding sits in a backlog.</li>
<li>Vulnerability Validation &amp; Remediation Partnership Validate vulnerabilities from all sources: your own testing, SAST, SCA, third-party pen tests, bug bounty submissions, and security research. Confirm exploitability, assess severity in context, and deliver specific fix recommendations to engineering teams grounded in the codebase and deployment model.</li>
<li>Cyber Defense &amp; Architect Partnership Partner with Cyber Defense and Security Architects to translate offensive findings into defensive capabilities. Turn validated exploitation paths into detection signatures, monitoring rules, WAF configurations, and runtime protections. Work with Security Architects to identify emerging attack techniques relevant to BeyondTrust's product surface and build proactive testing coverage for them.</li>
<li>Security Tooling &amp; Automation Build and maintain AI-driven security testing tooling integrated into CI/CD pipelines. Develop custom SAST rules, and automated validation workflows using Claude and Codex. Contribute prompts, skills, plugins, and agent pipelines back to the Product Security team's shared tooling library.</li>
<li>Threat Modeling &amp; Secure Design Participate in threat modeling exercises alongside Product Security Architects. Bring the attacker's perspective: identify abuse cases, map exploitation paths, and pressure-test design assumptions based on real testing experience across the product portfolio.</li> 
</ul>
What You'll Bring 
 
Required
<ul>
<li>5+ years in Product Security, or Penetration Testing with direct hands-on testing and exploit development</li>
<li>Strong expertise in web application and API security: authentication/authorization, session management, input validation, cryptography, injection attacks, deserialization, SSRF, and privilege escalation</li>
<li>Proficiency with penetration testing tools and methodologies (Burp Suite, custom scripts, fuzzing frameworks) combined with manual exploit validation</li>
<li>Hands-on experience using LLM platforms (Claude, Codex, or similar) to build security testing workflows, generate test cases, analyze code, or develop exploits</li>
<li>Experience building custom security tooling: fuzzers, scanners, exploit frameworks, or automation that goes beyond configuring off-the-shelf products</li>
<li>Strong understanding of common vulnerability classes (OWASP Top Ten, API Security Top Ten, CWE) and how they manifest in real production applications</li>
<li>Experience collaborating with defensive security teams (SOC, Cyber Defense, IR) to translate offensive findings into detection and monitoring capabilities</li>
<li>Understanding of cloud security fundamentals (preferably AWS) and CI/CD pipeline security</li>
<li>Strong communication skills: you can explain a complex exploitation chain to an engineering team and deliver a clear risk narrative to leadership</li>
</ul>
Preferred
<ul>
<li>Experience building AI-native security workflows, threat hunting agents, or automated fuzzing pipelines using LLM platforms</li>
<li>Background in securing endpoint technologies, identity systems, privileged access management, or enterprise security platforms</li>
<li>Experience with mobile application security testing and thick client assessments</li>
<li>Familiarity with container security, Kubernetes security, and infrastructure-as-code scanning</li>
<li>Experience working with bug bounty programs, vulnerability disclosure programs, or coordinated disclosure</li>
<li>Professional certifications such as OSWE, OSCP, GWAPT, GPEN, or equivalent hands-on credentials</li>
<li>Contributions to security research, open-source security tooling, or published vulnerability disclosures</li>
</ul>
How We'll Measure Success
<ul>
<li>Consistent discovery of meaningful vulnerabilities with validated PoC exploits that drive remediation across the product portfolio</li>
<li>AI-powered threat hunting skills and fuzz factory plugins actively finding vulnerability classes at scale that manual testing alone would miss</li>
<li>Validated findings include specific, implementable fix recommendations that engineering teams act on</li>
<li>Offensive findings translate into measurable defensive improvements through partnership with Cyber Defense and Research</li>
<li>Reusable skills, prompts, and plugins you build are adopted by the broader Product Security team</li>
<li>Engineering and security leadership trust your severity assessments and prioritization recommendations</li>
</ul>
Better Together

Diversity. Inclusion. They're more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.

We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.

About Us

BeyondTrust is the global identity security leader protecting Paths to Privilege&trade;. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.

BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.

Learn more at www.beyondtrust.com.

#LI-BS1</div>

Sr Product Security Engineer

Blockchain

<div><div>Blockchain is connecting the world to the future of finance. As the most trusted and fastest-growing global crypto company, it helps millions of people worldwide safely access cryptocurrency. Since its inception in 2011, Blockchain has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.</div>
You will operate the Product Security programe for Blockchain.com's internally-developed products across Consumer, OTC and MRE lines. This is a senior, hands-on role: you'll design and run the secure development lifecycle, lead threat modeling and architecture review, own the security debt lifecycle for product engineering teams, and architect the automated pipelines that protect billions in transaction volume. You will embed with product and engineering teams, convert technical findings into business-prioritized remediation, and lift developer capabilities so security is delivered by code and process.

WHAT YOU WILL DO
<ul>
<li>Strategic Security Partnership: Act as a senior security engineer for the different product lines like Consumer, OTC. You will own the security gates for major feature releases and ensure security is integrated from the design phase.</li>
<li>Secure SDLC Operator: Operate and improve the secure development lifecycle. This includes orchestrating SAST/SCA/DAST, streamlining SARIF ingestion, PR review standards, CI/CD security automation, and vulnerability triage workflows.</li>
<li>AI-Driven SDLC Innovation: Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into our secure development lifecycle.</li>
<li>Threat Modelling &amp; Architecture Reviews: Lead STRIDE/attack-tree threat models for sensitive flows including authentication, payment, custody, reconciliation and sign off on security architecture for critical designs.</li>
<li>Product Security Governance &amp; Standards: Translate technical risks and regulatory demands into clear security policies. You will own the creation and upkeep of our Application Security Standards, reference architectures, and compliance-driven secure coding baselines.</li>
<li>Bug Bounty Leadership: Oversee the technical triage and remediation strategy for our Bug Bounty program. You will turn external researcher findings into internal architectural hardening projects.</li>
<li>Release Reviews: Perform deep-dive manual code reviews of security-sensitive Pull Requests, mentor engineers on secure coding patterns, and provide pragmatic remediation guidance.</li>
<li>Advanced Code Auditing: Conduct deep-dive manual and automated code reviews on highly sensitive Java and Kotlin backend Pull Requests.</li>
<li>Security Debt &amp; Remediation Negotiation: Produce data-driven Security Debt packs and negotiate remediation into engineering roadmaps. You will negotiate remediation timelines with Product Owners and Engineering leadership, backed by risk-based data.</li>
<li>Detection &amp; Telemetry Integration: Define application runtime signals (business-logic anomalies, auth anomalies, reconciliation mismatches) and work with SecOps to instrument logs and alerts.</li>
<li>Testing &amp; Automation: Build and maintain product-level test harnesses, fuzzing/property tests and CI checks to prevent regressions for business-critical flows.</li>
<li>Incident Response Support: Provide product-level Incident Response expertise like test forensic runbooks, support reproduction of payment/settlement incidents, and advise on containment/remediation whenever needed.</li>
<li>Metrics &amp; Risk Visibility: Define and own the Product Security metrics (e.g., MTTR for critical vulnerabilities, security debt burn-down, and defect density). You will translate these KPIs into high-level risk reports for the Head of Security and Engineering leadership to drive data-backed resourcing decisions.</li>
<li>People &amp; Process: Coach junior product security engineers and security champions. You will assist the Product Security Lead to define hiring standards and capability plans.</li>
</ul>
WHAT YOU WILL NEED

Must-Haves
<ul>
<li>4+ years total security engineering experience with at least 3+ years focused specially in application/product security or equivalent.</li>
<li>Experience with Web, Mobile, Cloud, Infrastructure Pentests and Red Teaming (e.g., phishing)</li>
<li>Proven track record of shipping security automation using CodeQL/GHAS, Snyk, or similar. You should be intimately familiar with the SARIF ecosystem and ASPM workflows.</li>
<li>Expert-level ability to audit and propose fixes in Kotlin/Java, TypeScript/JS, Python, and familiarity with containerised deployments (Kubernetes).</li>
<li>Strong threat modeling experience and pragmatic architecture guidance for high-stakes financial flows (AuthN/AuthZ, Cryptography, Payments).</li>
<li>Experience building CI checks, test harnesses and lightweight fuzzing/property tests.</li>
<li>Excellent stakeholder skills &mdash; able to negotiate remediation with Engineering Directors and Product owners, balancing security requirements with business velocity.</li>
</ul>
Nice-to-haves
<ul>
<li>Prior fintech/Trading/OTC product security experience or familiarity with custody/signing patterns.</li>
<li>Practical experience designing or deploying AI-assisted security tooling, leveraging LLMs for automated software patch generation, or evaluating vulnerability detection agents within enterprise developer pipelines.</li>
<li>Prior experience operating alongside GRC frameworks, authoring developer-facing security policies from scratch, and building automated policy-as-code gateway integrations.</li>
<li>Public track record of CVEs, security research, or open-source contributions to security tooling.</li>
<li>Advanced credentials such as OSCP, OSWE, CISSP or equivalent.</li>
<li>Experience with on-chain/off-chain integration, payment reconciliation, or smart contract security.</li>
<li>Familiarity with vulnerability management platforms (DefectDojo, Dependabot orchestration) and GRC/Gateway integrations.</li>
<li>Prior contributions to security automation and developer tooling (open source or internal).</li>
</ul>
COMPENSATION &amp; PERKS
<ul>
<li>Full-time salary based on experience and meaningful equity in an industry-leading company</li>
<li>This is a role based in our London office, with a mandatory in-office presence four days per week.</li>
<li>Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.</li>
<li>ClassPass</li>
<li>Unlimited vacation policy; work hard and take time when you need it</li>
<li>Apple equipment</li>
<li>The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an emerging field</li>
<li>Flexible work culture</li>
</ul><div>
Blockchain is committed to diversity and inclusion in the workplace and is proud to be an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, religion, color, national origin, gender, gender expression, sex, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, and apprenticeship. Blockchain makes hiring decisions based solely on qualifications, merit, and business needs at the time.

You may contact our Data Protection Officer by email at dpo@blockchain.com. Your personal data will be processed for the purposes of managing Controller's recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment.

Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller's behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under the standard contractual clauses.

Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have the right to data portability. In addition, you may lodge a complaint with an EU supervisory authority.</div></div>

Senior Product Security Engineer

SanDisk

<div>Company Description 
Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today&rsquo;s needs and tomorrow&rsquo;s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we&rsquo;re living in and that we have the power to shape.
Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globally for innovation, performance and quality.
Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations. These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world moving forward. 
Job Description 
Sandisk&rsquo;s Product Security Engineering &amp; Assurance (PSEA) organization is seeking highly motivated Product Security Engineers &ndash; Hardware/Firmware specializing in security considerations for Client and Enterprise storage products (SSDs) that incorporate hardware and firmware components.
This role will partner closely with firmware, hardware, Platform Security, validation, and product teams to strengthen security across Sandisk products through product security assessments, security readiness assurance, PSIRT support, technical risk mitigation guidance, and product security enablement.
The ideal candidate combines strong technical depth in embedded systems and firmware with practical product security experience and the ability to influence engineering teams toward scalable, risk-informed security outcomes. This role requires strong technical judgment, hands-on engagement, and the ability to communicate complex cybersecurity topics to engineering, business, and customer stakeholders.
Essential Duties and Responsibilities:
Product Security Engineering &amp; Enablement<ul><li>
Partner with firmware, hardware, and product teams to strengthen cybersecurity considerations across product lifecycles.</li><li>
Provide technical guidance on implementation of security requirements and security controls for hardware and firmware-based products.</li><li>
Evaluate product security posture and implementation effectiveness with a security lens, identifying potential attack paths, control gaps, and risk areas.</li><li>
Help product teams prioritize practical mitigations based on product risk, exploitability, and business objectives.</li><li>
Support product teams in balancing cybersecurity rigor with product delivery objectives and business priorities.</li></ul>
Security Risk Assessment &amp; Threat Modeling<ul><li>
Facilitate product security risk assessments and support threat modeling activities across firmware-driven products.</li><li>
Assess product security risks across:<ul><li>
authentication and authorization mechanisms,</li><li>
firmware update protections,</li><li>
secure boot and trust anchors,</li><li>
cryptographic protections,</li><li>
debug and manufacturing access controls,</li><li>
provisioning and lifecycle security mechanisms.</li></ul></li><li>
Participate in technical reviews to evaluate security implementation effectiveness and identify opportunities for risk reduction.</li></ul>
Security Readiness &amp; Assurance<ul><li>
Support product security readiness activities by evaluating implementation effectiveness, security evidence, and residual product risk from an assurance perspective.</li><li>
Assess security posture and implementation effectiveness related to:<ul><li>
authentication and authorization mechanisms,</li><li>
firmware update protections,</li><li>
secure boot and trust anchors,</li><li>
cryptographic protections,</li><li>
debug and manufacturing access controls,</li><li>
provisioning and lifecycle security mechanisms.</li></ul></li><li>
Evaluate security artifacts and technical evidence including:<ul><li>
threat modeling outputs,</li><li>
SAST and static analysis findings,</li><li>
SBOM and dependency risk visibility,</li><li>
fuzzing and penetration testing outcomes,</li><li>
vulnerability remediation activities,</li><li>
security validation evidence.</li></ul></li><li>
Support customer, regulatory, and internal security assurance activities through technical assessment, documentation, and security evidence review.</li><li>
Provide technically grounded recommendations to strengthen product security posture, reduce risk, and improve confidence in product readiness.</li><li>
Identify recurring security gaps, lessons learned, and opportunities for scalable product security improvement across programs.</li></ul>
PSIRT &amp; Vulnerability Management<ul><li>
Support Product Security Incident Response Team (PSIRT) activities, including vulnerability triage, technical assessment, remediation coordination, and product security risk evaluation.</li><li>
Conduct technical vulnerability assessments and support CVSS scoring activities based on exploitability, deployment context, product exposure, and customer impact.</li><li>
Partner with firmware and product teams to assess reported vulnerabilities, identify root causes, and recommend practical remediation strategies.</li><li>
Help translate vulnerability learnings into durable product security improvements and security best practices.</li><li>
Support coordination and technical analysis for external vulnerability disclosures, customer-reported issues, and security research findings.</li></ul>
Security White Papers &amp; Technical Guidance<ul><li>
Author technical security white papers, technical guidance, and customer-facing security content related to product security posture, secure design practices, and emerging cybersecurity topics.</li><li>
Support customer security inquiries, product assurance requests, and technical cybersecurity discussions.</li><li>
Contribute to internal security guidance, reusable security patterns, and best practices to improve consistency across product teams.</li></ul>
Cross-functional Collaboration<ul><li>
Collaborate closely with:<ul><li>
Platform Security Architects,</li><li>
Firmware Engineering,</li><li>
Hardware/ASIC teams,</li><li>
Product Engineering,</li><li>
Validation teams,</li><li>
PSIRT,</li><li>
Product Security Assurance,</li><li>
External security assessment partners.</li></ul></li><li>
Provide clear technical direction and risk-informed guidance to engineering and business stakeholders.</li></ul> 

Qualifications 
Required:<ul><li>
Bachelor&rsquo;s degree or greater in Computer Science, Electrical Engineering, Computer Engineering, Cybersecurity, or related technical field.</li><li>
5+ years of experience in product security, embedded systems, firmware engineering, hardware/software security, or related disciplines.</li><li>
Strong understanding of:<ul><li>
hardware and firmware security principles,</li><li>
embedded systems security,</li><li>
security threat modeling,</li><li>
security risk assessments,</li><li>
vulnerability management,</li><li>
security risk mitigation.</li></ul></li><li>
Familiarity with:<ul><li>
secure boot,</li><li>
authentication and authorization,</li><li>
cryptographic protocols and libraries,</li><li>
firmware update security,</li><li>
hardware-software interactions,</li><li>
Flash storage, RAM, and cache systems.</li></ul></li><li>
Working knowledge of cybersecurity standards, best practices, and secure development principles.</li><li>
Strong written and verbal communication skills with the ability to communicate effectively across technical and non-technical audiences.</li></ul>
Preferred:<ul><li>
Experience with SSDs, storage controllers, flash technologies, or storage system architectures strongly preferred.</li><li>
3+ years of embedded hardware/software development or design experience.</li><li>
Familiarity with:<ul><li>
FIPS 140,</li><li>
Common Criteria,</li><li>
CVSS,</li><li>
Vulnerability management,</li><li>
Incident response,</li><li>
Penetration testing.</li></ul></li><li>
Experience supporting PSIRT or vulnerability response activities is a plus.</li><li>
Experience with embedded software development is a plus.</li><li>
Strong analytical, technical problem-solving, and critical thinking skills.</li><li>
Strong technical communication and documentation capabilities.</li><li>
Ability to influence engineering teams through technical credibility and collaboration.</li><li>
Strong judgment in balancing product risk, customer commitments, and business priorities.</li><li>
Passion for cybersecurity, emerging threats, and secure product development.</li></ul> 

Additional Information 
Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person&rsquo;s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person&rsquo;s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the &quot;Know Your Rights: Workplace Discrimination is Illegal&rdquo; poster. Our pay transparency policy is available here.
Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution.
Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at jobs.accommodations@sandisk.com to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.
Based on our experience, we anticipate that the application deadline will be 09/022/2026 (3 months from posting), although we reserve the right to close the application process sooner if we hire an applicant for this position before the application deadline. If we are not able to hire someone from this role before the application deadline, we will update this posting with a new anticipated application deadline.
#LI-KH1<div></div>
Compensation &amp; Benefits Details<ul><li>
An employee&rsquo;s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs.</li><li>
The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future.</li><li>
You will be eligible to participate in Sandisk's Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan. RSU awards are also available to eligible new hires, subject to Sandisk's Standard Terms and Conditions for Restricted Stock Unit Awards.</li><li>
We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&amp;D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Sandisk's Savings 401(k) Plan.</li><li>
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company&rsquo;s sole discretion, consistent with the law.</li></ul></div>

Product Security Engineer - Hardware/Firmware

Rolls-Royce

<div><div><div><div><div><div><div><div><h2 class="jobSectionHeader">Job Description
</h2></div></div></div></div></div></div></div>Job Title: Product System Security Engineer
Working Pattern: Full Time
Working location: Indianapolis, IN (3 days in office/2 days onsite)
We&rsquo;re looking for a Product System Security Engineer (cyber-physical embedded systems) to join our growing team. In this role, your focus will be on helping to secure a range of Roll-Royce Defense products against an increasingly diverse and complex range of threats. You&rsquo;ll be part of a multi-disciplinary team, working together to tackle technical challenges in a stimulating and collaborative environment.
This is an exciting opportunity to work on flagship Rolls-Royce programs and play an important role in addressing some of the most complex and interesting technological challenges in Defense. There are several disciplines within SSE that you will be exposed to and be able to participate in. You will be encouraged to further develop and leverage your skills and experience in Systems Security Engineering, identify and pursue unique specialty skillsets, and help grow Rolls-Royce capability in this pivotal area.
Why Rolls-Royce?
Rolls-Royce is one of the most enduring and iconic brands in the world and has been at the forefront of innovation for over a century. We design, build and service systems that provide critical power to customers where safety and reliability are paramount.
We are proud to be a force for progress, powering, protecting and connecting people everywhere.
We want to ensure that the excellence and ingenuity that has shaped our history continues into our future and we need people like you to come and join us on this journey.
Rolls-Royce has been recognized as the top employer in the Engineering &amp; Manufacturing category on the prestigious Forbes Top Employers for Engineers list for 2025. This ranking highlights our commitment to innovation, employee development, and fostering a collaborative environment where engineers can thrive.
Be part of a team that sets the industry standard and drives groundbreaking solutions.
At Rolls-Royce, we are committed to creating a workplace where all employees feel respected, supported, and empowered to do their best work. We foster a welcoming and innovative work environment that invests in you, giving you access to an incredible breadth and depth of opportunities where you can grow your career and make a difference.
Rolls-Royce is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any protected characteristics.
What you will be doing
With this attractive opportunity you will get a chance to:
<ul><li>Work with the core product security and LibertyWorks teams to determine the technology and processes required to meet customer requirements for system security and resiliency.
</li><li>Act as a business technical specialist in secure cyber resilient engineering (SCRE), applying technical knowledge and providing technical direction as required throughout the product lifecycle: requirements, design, build, test, production, operations, and support.
</li><li>Lead a small number of individuals or projects in this subject area, providing technical leadership to teams or projects in addition to having impact through functional knowledge.
</li><li>Collaborate with government, customers, suppliers, and industry experts to meet system requirements.
</li><li>Create digital models and use digital tools such as model-based systems engineering (MBSE) to meet program expectations.
</li><li>Develop and update systems security and resilience good practice and help ensure the techniques, policies, procedures, and knowledge to enable us to implement this good practice across the business.
</li></ul>Who we&rsquo;re looking for:
At Rolls-Royce we put safety first, do the right thing, keep it simple and make a difference. These principles form the behaviours that guide us and are an essential component of our assessment process. They are the fundamental qualities that we seek for all roles.
Basic Requirements:
<ul><li>Associate degree with 4+ years of experience in a relevant engineering environment (Electrical, Software, Controls, Systems)
</li><li>Bachelor's degree in STEM discipline with experience in a relevant engineering environment (Electrical, Software, Controls, Systems) with 2+ years&rsquo; experience, OR
</li><li>Master&rsquo;s degree in STEM discipline with experience in a relevant engineering environment (Electrical, Software, Controls, Systems), with 0+ years&rsquo; experience OR
</li><li>JD/PhD OR
</li><li>In order to be considered for this role, must be a U.S. citizen with the ability to obtain and maintain a high-level security clearance.
</li></ul>Preferred Requirements:
<ul><li>5+ years of experience working in Product Security Engineering on real-time cyber-physical embedded systems (ie - aviation systems, software defined vehicles, medical devices, weapon systems, etc) OR 10+ years of experience working in a related Engineering role (ie - Systems Engineering, Embedded Computer Engineering, or Embedded Software Engineering, etc)
</li><li>Experience with Systems Engineering on complex systems and excellent systems thinking aptitude: the ability to understand complex system boundaries, interactions, and interdependencies across multiple abstraction layers throughout the system&rsquo;s entire lifecycle.
</li><li>Experience of embedded systems and the technical skills required to develop, implement, and secure such cyber-physical systems.
</li><li>Experience or interest in cybersecurity and cyber threats (ie - designing secure products, systems, and applications; intrusion detection; digital forensics; system recovery; risk assessment tools and methods; security solutions, policies, standards, and procedures, etc.).
</li><li>Experience in applying Product Security policies and standards to the engineering of cyber-physical systems such as NIST SP 800-160, DO-326, UK Secure By Design, IEC 62443, the Risk Management Framework (RMF), and DoDI 5000.83,.
</li><li>Excellent communications skills: able to influence without authority and describe complex ideas simply and succinctly to non-technical people.
</li></ul>What we offer
We offer excellent development opportunities, a competitive salary, and exceptional benefits. These include bonus, employee support assistance and employee discounts.
Your needs are as unique as you are. Hybrid working is a way in which our people can balance their time between the office, home, or another remote location. It&rsquo;s a locally managed and flexed informal discretionary arrangement. As a minimum we&rsquo;re all expected to attend the workplace for collaboration and other specific reasons, on average three days per week.
For fully remote roles, employees can live in any state except Idaho, Nebraska, Nevada, Vermont, and Wyoming.
Relocation assistance will be provided if applicable.
Close Date: June 20th, 2026 
<div><div><div><div><div><div><div><h2 class="jobSectionHeader"> 
Job Category
</h2></div></div></div></div></div></div></div>Software Systems
<div><div><div><div><div><div><div><h2 class="jobSectionHeader"> 
Job Posting Date
</h2></div></div></div></div></div></div></div>15 Jun 2026; 00:06
<div><div><div><div><div><div><div><h2 class="jobSectionHeader"> 
Pay Range
</h2></div></div></div></div></div></div></div>$98,566 - $160,169-Annually 
<div><div><div><div><div><div><div> 
Location:
</div></div></div></div></div></div></div>Indianapolis, IN 
 
Benefits
Rolls-Royce provides a comprehensive and competitive Total Rewards package that includes base pay and a discretionary bonus plan. Eligible employees may have the opportunity to enroll in other benefits, including health, dental, vision, disability, life and accidental death &amp; dismemberment insurance; a flexible spending account; a health savings account; a 401(k) retirement savings plan with a company match; Employee Assistance Program; Paid Time Off; certain paid holidays; paid parental and family care leave; tuition reimbursement; and a long-term incentive plan. The options available to an employee may vary depending on eligibility factors such as date of hire, employment type, and the applicability of collective bargaining agreements.</div>

Product System Security Engineer

Delivery Hero

<div>Company Description 
As the world&rsquo;s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide powered by tech, designed by people. As one of Europe&rsquo;s largest tech platforms, headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We enable creative minds to deliver solutions that create impact within our ecosystem. We move fast, take action and adapt. No matter where you're from or what you believe in, we build, we deliver, we lead. We are Delivery Hero. 
Job Description 
We are looking for a Staff Security Engineer (all genders) to join our Product Security team on our journey to always deliver amazing experiences.
We are looking for a pragmatic, high-impact individual contributor to join our Product Security team as a Staff Product Security Engineer (IC4). In this pivotal role, you will drive the overarching technical strategy for application security, ensuring we reduce real-world risk across our entire product landscape without slowing down engineering velocity.
You will champion a &quot;Secure by Design&quot; philosophy, moving away from reactive auditing and security gatekeeping. Instead, you will treat security as a collaborative engineering challenge, designing the automated guardrails, developer tooling, and technical frameworks that enable our engineering teams to scale rapidly and securely by default. As a Staff-level individual contributor, your leadership will extend beyond the immediate product boundaries and you will achieve domain-wide impact by seamlessly bridging the gap between Application Security, AI/ML security, Infrastructure Security, and Security Operations.
Your mission:<ul><li>
Drive Product Security Maturity: Drive the strategic technical roadmap for the Product Security team, ensuring threat-modeling methodologies and secure coding practices scale efficiently across our global web and mobile application ecosystem.</li><li>
Lead Threat Modeling &amp; Security Architecture Reviews: Apply your expertise to identify complex security design flaws early in the Software Development Life Cycle (SDLC) using frameworks and automation tools, co-authoring architectural blueprints that are secure by default.</li><li>
Scale Vulnerability Management &amp; Governance: Architect and run our vulnerability management program at scale. You will ingest inputs from internal testing, automated tooling, and external Bug Bounty / Vulnerability Disclosure Programs, systematically validating and ranking vulnerabilities based on actual business risk.</li><li>
Master Stakeholder Management: Translate complex software and AI-related vulnerabilities into clear, actionable business risks, partnering closely with engineering leadership and product verticals to drive timely remediation without friction. systematically tracking and optimizing metrics such as Mean Time to Remediate (MTTR) and SLA Adherence % to elevate our overall security posture.</li><li>
Automate DevSecOps &amp; CI/CD Pipelines: Replace manual gates with seamless DevSecOps workflows, embedding automated security testing tools (SAST, DAST, SCA) directly into developer pipelines to catch high-risk flaws early.</li><li>
Pioneer AI-Driven Security Automation: Champion the adoption of artificial intelligence and LLMs to revolutionize our security workflows. You will design and implement cutting-edge AI-powered code security automation, leverage AI for automated vulnerability triage, and build smart security automation guardrails that scale engineering productivity.</li><li>
Cross-Domain Collaboration &amp; CSPM Management: Drive domain-wide impact by collaborating with Infrastructure Security to leverage Cloud Security Posture Management (CSPM) platforms, ensuring that application vulnerabilities are contextualized with cloud risk. Partner with Security Operations (Detection &amp; Response) to ensure proper application logging, alerting, and incident readiness.</li><li>
Mentor and Inspire: Act as a technical beacon within the security and engineering organizations. Define key security metrics, drive a strong security culture, and mentor junior and senior engineers to foster a world-class community of Security Champions</li></ul> 
Qualifications<ul><li> 
Proven Engineering Leadership: A strong track record of driving complex application security and DevSecOps initiatives as a staff-level individual contributor in massive, global software environments.</li><li>
Comprehensive Web &amp; Mobile Security: Deep, fundamental understanding of modern web and mobile application security topics, including hands-on experience managing external Bug Bounty and vulnerability disclosure programs.</li><li>
AI Security Expertise: Strong working knowledge of industry-standard security frameworks for artificial intelligence, such as the OWASP Top 10 for LLM Applications, MITRE ATLAS, and the NIST AI RMF.</li><li>
AI &amp; Security Automation Hands-on Experience: Practical understanding of utilizing artificial intelligence (including LLMs/Generative AI) for security engineering use cases, such as automated vulnerability analysis, script generation, triage optimization, and code security remediation.</li><li>
Privacy, Ethics &amp; Regulations: A solid understanding of global data privacy laws (e.g., GDPR), ethical AI considerations, and the regulatory impacts of the EU AI Act on application architecture.</li><li>
Risk-Based Vulnerability Management: Strong expertise in vulnerability validation and triage, with the ability to look past raw CVSS scores to calculate actual business impact, coupled with excellent stakeholder management skills to align engineering teams on remediation.</li><li>
Secure Coding &amp; Remediation Proficiency: Deep hands-on proficiency in multiple modern programming languages (e.g., Java, Python, Go) and the ability to confidently code, review, and remediate complex vulnerabilities (such as the OWASP Top 10) directly within application repositories.</li><li>
Cloud &amp; CSPM Familiarity: Strong working knowledge of cloud security (AWS, GCP, or Azure) and containerized ecosystems (Kubernetes, Docker), alongside an understanding of how to align application security signals with Cloud Security Posture Management (CSPM) platforms.</li><li>
Identity &amp; Access Management (IAM): Deep understanding of modern authentication and authorization protocols (OAuth, OIDC, SAML) and how to design and enforce Zero Trust architectures at scale.</li><li>
Cross-Functional Security Ops Alignment: Basic working knowledge of security operations, threat detection, and incident response, ensuring that product architectures are built to be auditable, observable, and resilient against live attacks.</li></ul>
Nice to have:<ul><li>
Experience securing highly distributed, event-driven microservices architectures at global scale.</li><li>
History of public security research, CVE discovery, or active contributions to open-source security or AI safety tooling.</li><li>
Advanced application security or cloud certifications (e.g., CSSLP, CASE, AWS Security Specialty, Google Professional Cloud Security Engineer, or CISSP).</li></ul> 
Additional Information 
Ensuring you and all our Heroes are looked after, happy, and healthy is always on the menu. Because if you&rsquo;re in good shape, then we&rsquo;re in good shape.<ul><li>
Make the most of our hybrid working model and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week</li><li>
We offer 27 days holiday with an extra day on 2nd and 3rd year of service</li><li>
We will support you in developing yourself and your career growth opportunities: 1.000 &euro; Educational Budget, Language Courses, Parental Support and access to the Udemy Business platform to explore a variety of online courses.</li><li>
Get moving and release those wonderful, mind-boosting endorphins: Health Checkups, Meditation, Yoga, Gym &amp; Bicycle Subsidy</li><li>
Cash. Dough. Cheddar. Whatever you call it, we&rsquo;ll help you with it: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life &amp; Accident Insurance, Corporate Pension Plan</li><li>
The power of getting together over some food is unrivaled. Here are a few ways to help you do that. All the yum: Digital Meal Vouchers, Food Vouchers, Corporate Discounts. Courses.</li></ul> 
We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you. 
 
We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience&mdash;just let us know with an email to our Inclusion Officer at inclusion@deliveryhero.cominclude it in your application. 
 
Severely disabled applicants with equal qualifications will be given preferential consideration. 
 
You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.<div></div>
We believe diversity and inclusion are key to creating not only an exciting product, but also an amazing customer and employee experience. Fostering this starts with hiring - therefore we do not discriminate on the basis of racial identities, religious beliefs, color, national origin, gender identities or expressions, sexual orientations, age, marital or disability statuses, or any other aspect that makes you, you. 
 
We encourage you to let us know if you need any accommodations or specific accessibility support to ensure a smooth interview experience&mdash;just let us know with an email to our Inclusion Officer at inclusion@deliveryhero.com. 
 
Severely disabled applicants with equal qualifications will be given preferential consideration. 
 
You're welcome to share your pronouns (he/she/they) right from the start so we can address you respectfully from our first contact.</div>

Staff Security Engineer, Product Security team

Goldman Sachs

<div>
 
 Job Description
 
 
 
 
 Role Overview
 
 
 
 The Lead Product Security Engineer position within the Asset and Wealth Management division and will be responsible for defining and evaluating solutions by closely working with the engineering teams to improve overall cybersecurity risk posture of the firm. This role is pivotal in balancing commercial objectives with robust security controls, ensuring the division's resilience against an evolving threat landscape, and protecting client assets and data.
 
 
 The objective is to foster a unified and proactive approach to risk management through early design review and penetration testing engagements with the engineering BU teams and enabling secure technological innovation across all Asset and Wealth Management initiatives.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 This position is hands-on and requires close collaboration with Product Management, Engineering, Program Management, and Dev Ops teams.
 </li>
 <li>
 Responsible for security of applications (Cloud/Web/API/Mobile) managed by Asset and Wealth Management (AWM) in conjunction with centralized security teams
 </li>
 <li>
 Act as a security advisor to architects, developers, analysts and others to ensure we design confidentiality, integrity, resiliency, and privacy into the platform
 </li>
 <li>
 Partner with business units to understand requirements, design proposals and evaluate architectural flaws for various on-prem/cloud architectures
 </li>
 <li>
 Evaluate the effectiveness of existing key controls, identify gaps, and recommend improvements to mitigate risks and enhance firm&rsquo;s security posture
 </li>
 <li>
 Supervise, coach, and develop a small team of application security specialists
 </li>
 <li>
 Drive adoption of embedded application security controls as part of the Software Development Life Cycle (SDLC) in Agile methodology, including automated tools.
 </li>
 <li>
 Perform secure code reviews and facilitating or conducting penetration testing
 </li>
 <li>
 Assist in implementation of security related product features such authentication, cryptography, authorization, service integration, etc.
 </li>
 <li>
 Develop, maintain, and improve Technology Risk Program reflecting new emerging risks
 </li>
 <li>
 Enable the business to meet security requirements by design
 
 
 </li>
 </ul>
 
 Skills And Experience Required
 
 
 
 <ul>
 <li>
 6 plus years' experience in secure architecture design, application security, and risk analysis techniques or related fields.
 </li>
 <li>
 Energetic, self-directed and self-motivated, able to build and sustain long-term relationships with colleagues.
 </li>
 <li>
 Must have experience managing multiple tasks and using sound judgment when managing risks, prioritizing and escalating.
 </li>
 <li>
 Must be able to work with deeply technical engineers, identify gaps that need addressing, and hold them to account.
 </li>
 <li>
 Security testing methodologies, tools and techniques - understanding of common application security vulnerabilities and controls to remediate.
 </li>
 <li>
 Expert knowledge of application security best practices including OWASP and CWE and cloud related concepts
 </li>
 <li>
 Hands-on software development and/or application Penetration Testing experience in complex environments an advantage
 </li>
 <li>
 The successful candidate will be able to balance project management trade-offs, own decisions and communicate effectively with senior stakeholders across business, partners, vendors, internal technology stakeholders and technology peers, with an eye towards influencing and driving positive business outcomes.
 </li>
 <li>
 Strong desire to learn and contribute solutions and ideas to a broad team.
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Experienced in Financial Services/Fintech
 </li>
 <li>
 BS or MS degree in Computer Science, Cyber Security, Information Security, or a related technical field.
 </li>
 <li>
 Experience with leveraging AI/ML to solve security problems and scale operations.
 </li>
 <li>
 Knowledge of secure coding languages (e.g., Python, Java, Go).
 </li>
 <li>
 Cloud related experiences
 </li>
 <li>
 CSSLP / CISSP / CCSP / OSCP is a plus
 
 
 </li>
 </ul>
 
 About Goldman Sachs
 
 
 
 At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world.
 
 
 We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at GS.com/careers.
 
 
 We&rsquo;re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process. Learn more: https://www.goldmansachs.com/careers/footer/disability-statement.html
 
 
 &copy; The Goldman Sachs Group, Inc., 2023. All rights reserved.
 
 
 Goldman Sachs is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, veterans status, disability, or any other characteristic protected by applicable law.
</div>

Asset & Wealth Management - Doha - Vice President - Security Engineering

Search 10000+ Product security engineer jobs near you this July. New roles added regularly across leading industries. Apply today.