Lead Product Security Engineer
Cloud Software Group1 day ago
Base Salary
$168k - $287k/yr
Responsibilities
- Lead and execute the Secure Software Development Lifecycle for on-premises and cloud products.
- Guide product development teams on security requirements and design changes.
- Conduct manual source-code reviews primarily in C and C++.
- Analyze crashes for exploitability and security vulnerabilities.
- Execute internal penetration tests and identify security vulnerabilities.
- Develop prototypes and scalable solutions to prevent security problems.
- Perform design reviews, threat modeling, root-cause analysis, and vulnerability remediation.
- Write exploits for vulnerabilities identified in relevant security areas.
Requirements
- 9+ years of hands-on product security experience with strong emphasis on C/C++ development and security analysis.
- Full-time engineering degree, preferably in a computer science-related field.
- Expertise in at least one security area such as Unix systems, networking, or cryptography.
- Hands-on C and C++ programming experience with strong low-level Linux systems knowledge.
- Knowledge of TCP/IP, HTTP/S, DNS, and other networking protocols.
- Debugging experience with GDB, core dump analysis, and Makefile concepts.
- Extensive knowledge of common vulnerabilities and the OWASP Top 10 across multiple programming languages.
- Deep understanding of application architecture and design principles.
- Experience with design reviews and threat modeling.
- Ability to identify vulnerabilities, perform root-cause analysis, and write exploits.
- Reverse engineering and fuzzing experience, including AFL or Peach, is preferred.
- Certifications such as OSCP, OSCE, GPEN, or CRTP are preferred.
Benefits
- U.S.-based employees are typically offered healthcare, life insurance, disability benefits, and a 401(k) plan with company match.
- Certain roles may be eligible for annual bonuses and sales incentives.
- Benefits vary based on employment type and country.
About Cloud Software Group
Cloud Software Group provides enterprise software across virtualization, secure access, integration, analytics, and app delivery through franchises including Citrix, TIBCO, and NetScaler. It sells subscriptions, cloud services, and support to large organizations and governments deploying DaaS/VDI, application delivery, integration, and data/AI platforms. The company was formed in 2022 by combining Citrix and TIBCO under Vista Equity Partners and Evergreen Coast Capital, and is headquartered in Fort Lauderdale, Florida.