Senior Product Security Engineer
Cloud Software Group3 days ago
Responsibilities
- Execute the Security Development Lifecycle and secure software development lifecycle for on-premises and cloud products.
- Guide product development teams on security requirements and design changes.
- Perform threat modeling, design reviews, targeted source code reviews, and internal penetration tests.
- Identify security vulnerabilities, conduct root cause analysis, and provide remediation guidance.
- Drive product security strategy within the assigned scope and provide direction on routine work.
- Write exploits for vulnerabilities identified in relevant security areas.
Requirements
- Full-time degree in Engineering, preferably Computer Science-related.
- 6+ years of relevant experience.
- Expertise in at least one security area involving Windows or Unix systems, networking, or cryptography.
- Strong C, C++, and C# skills.
- Strong knowledge of Linux and Windows internals, including low-level system architecture.
- Knowledge of networking, TCP/IP, HTTP/S, DNS, and other protocols.
- Understanding of file system concepts and object-oriented design principles.
- Extensive knowledge of common vulnerabilities and the ability to explain and remediate OWASP Top 10 vulnerabilities across multiple programming languages.
- Deep understanding of application architecture and design principles.
- Experience with design reviews and threat modeling.
- Ability to identify security vulnerabilities, perform root cause analysis, and write exploits.
Benefits
- U.S.-based employees are typically offered healthcare, life insurance, disability benefits, and a 401(k) plan with company match.
- Some roles may be eligible for annual bonuses or sales incentives depending on the applicable plan and individual performance.
- Benefits vary based on employment nature and work country.
- The requisition has no specific completion deadline.
About Cloud Software Group
Cloud Software Group provides enterprise software across virtualization, secure access, integration, analytics, and app delivery through franchises including Citrix, TIBCO, and NetScaler. It sells subscriptions, cloud services, and support to large organizations and governments deploying DaaS/VDI, application delivery, integration, and data/AI platforms. The company was formed in 2022 by combining Citrix and TIBCO under Vista Equity Partners and Evergreen Coast Capital, and is headquartered in Fort Lauderdale, Florida.