Staff Product Security Engineer
ServiceTitan3 days ago
Base Salary
$168k - $270k/yr
Responsibilities
- Join engineering planning and design activities to review roadmaps, architectures, and technical designs.
- Lead threat modeling across the portfolio and convert identified threats into tracked engineering requirements.
- Provide secure architecture guidance for cloud-native services, microservices, multi-tenant data access, identity, secrets, and AI-enabled features.
- Own the portfolio security risk picture and partner with engineering leaders on remediation priorities, SLAs, risk acceptance, and exceptions.
- Adapt and drive adoption of secure service templates, secrets management, cloud configuration templates, CI/CD guardrails, and IaC policy sets.
- Drive squad adoption and tuning of SAST, SCA, secrets scanning, IaC scanning, container scanning, and CSPM coverage.
- Review code and Terraform, pair with engineers on difficult fixes, and write reference implementations when needed.
- Recruit, coach, and support security champions and provide training, design reviews, and office hours.
- Provide portfolio metrics and feedback to security leadership and central Platform and Programs teams.
- Support triage and investigation of security incidents and incorporate lessons learned into security patterns.
Requirements
- 7–10+ years of experience in product security, application security, cloud security, or a closely related security engineering role.
- Strong software engineering foundation and experience embedded with or partnering directly with engineering teams.
- Breadth across secure code review, threat modeling, secure design, CI/CD and supply chain security, cloud identity and least privilege, IaC security, container and Kubernetes security, and cloud posture management.
- Proficiency reading and writing C#/.NET, Go, Java, or Python, with C#/.NET preferred.
- Hands-on experience with Azure and/or AWS security services and IaC tooling such as Terraform or Bicep.
- Track record leading threat modeling and architecture reviews at scale and turning findings into deliverable engineering requirements.
- Ability to build trust with VP-level engineering leaders and senior engineers and influence priorities without authority.
- Comfort with scripting, automation, repeatable security patterns, and AI-assisted security tooling.
- Familiarity with securing AI-enabled features and coding agents, non-human identities, MCP integrations, and AI-system data exposure.
- CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, OSCP, or similar certification is preferred but not required.
Benefits
- Flexible time off, learning and development opportunities, onboarding, leadership training, Bonusly, and peer-nominated awards.
- Company-paid medical, dental, and vision coverage, including fully employer-paid options and 90% dependent coverage, plus FSA, HSA, 401(k) match, and telehealth options including One Medical memberships.
- Parental leave, fertility services support up to $20,000, surrogacy and adoption reimbursement, Maven Maternity and Maven Milk programs, pet insurance, legal advisory services, and financial planning tools.
About ServiceTitan
ServiceTitan builds a cloud platform for home and commercial service contractors to run operations, including CRM, scheduling/dispatch, field mobile apps, estimates, invoicing, payments, and reporting. It also offers embedded fintech for payments and consumer financing, plus integrations for inventory and accounting. Founded in 2012 and headquartered in Glendale, California, it serves contractors across HVAC, plumbing, electrical, and roofing, and sells via subscription with add-on modules.