Product Security Engineer - Federal

5 days ago

Remote, United States

Mid Level / Senior

H1B Sponsor

Base Salary

$133k - $175k/yr

Responsibilities

Own multiple Security Engineering assignments working with Ping Identity products, processes, and tooling.
Assist in proposing, developing, and improving Secure Software Development Lifecycle (SSDLC) practices.
Work with product teams to perform security design/code reviews and vulnerability assessments.
Perform application security tasks including threat modeling, code reviews, and static/dynamic analysis.
Assist presales, support, and customer success teams with security-related inquiries.
Engage with third-party security consultants for independent assessments and penetration testing.

Must meet U.S. citizenship and residency eligibility for FedRAMP-regulated environments.
2+ years of application security experience in areas like API and Web Application Security.
3+ years of experience developing commercial software products.
Hands-on experience with Secure Software Development Lifecycle (SSDLC) security tooling.
Strong understanding of modern authentication and identity standards like OAuth 2.0 and SAML.
Ability to review application code for security vulnerabilities, ideally in Java or Go.
Experience identifying and mitigating vulnerabilities aligned with OWASP Top 10.
Familiarity with cloud-native application environments like GCP or AWS.
Understanding of networking protocols and modern data center architecture.
Exceptional problem-solving skills and attention to detail.

AnsibleAWSDockerGoGoogle Cloud PlatformJavaKubernetesLinuxTerraform