Product Security Engineer

3 Months ago • All levels

Job Summary

Job Description

As a Product Security Engineer, you will work with multiple engineering teams to ensure the security of products and infrastructure by addressing security concerns, evaluating system architectures, and organizing external security assessments and vulnerability remediation efforts. This role involves safeguarding AWS cloud products and implementing security protocols. You will be implementing product security designs, integrating application security testing tools, and ensuring compliance with regulations through audits and penetration testing. The role also involves managing CI/CD processes, understanding data architectures and modeling, and coordinating external security scans.

Must have:

Experience coding on data architectures and microservices.
Experience with Security tooling such as WIZ.
Experience with AWS and their security features.
Experience with container hosting and orchestration.
Ability to interpret external security scans.
Knowledge of security frameworks and standards

Good to have:

AZ500/SC100, CKS/CKA, AWS Certified Security certifications are a plus.
Mindset of continuous delivery and automation.

11 skills required

11 skills required for this role

Add these skills to join the top 1% applicants for this job

ci-cd

kubernetes

microservices

aws

docker

data-analytics

security-testing

software-development-lifecycle-sdlc

scalability

saas-business-models

ethical-hacking

Job Details

About Us:

Sitecore’s mission is to provide cutting-edge DXP solutions that enable the world’s greatest brands to craft truly unforgettable experiences for their customers. A highly decorated industry leader, Sitecore brings content, commerce, and data into one connected platform that delivers millions of digital experiences every day. Thousands of blue-chip companies, including American Express, Porsche, Starbucks, L’Oréal, and Volvo Cars, rely on Sitecore to provide more engaging, personalized customer experiences. Under the leadership of our new product-centric CEO, we are poised to continue to push the boundaries of marketing technology and shape the future of customer engagement. Learn more at Sitecore.com.

Engagement Stream products & team:

The Engagement Stream is a suite of SaaS products which enables our brands to understand users experiences — explore customer data management and audiences across multiple channels, deliver tested, personalized, and optimized experiences, transform site search experience that suggests and predicts relevant content and products as users type their search terms. These SAAS native products run on AWS based Cloud Infrastructure and consist of highly scalable data pipelines, orchestration, microservices, analytics platforms and rich user interfaces.

Our engineering teams are responsible for the services and pipelines for these data products from design through development, quality, performance, production deployments and operations and monitoring. The team is also responsible for driving architectural evolution, best practices, and guidance for running highly available and performant microservices.

It is a team of engineers with a mission to build a rock-solid service for Sitecore that supports 100s of engineers and 10s of millions of users today while continuing to scale rapidly.

About the Role:

We are looking for an experienced Product Security Engineer to work across the Engagement set of products. As a Product Security Engineer, you will partner with our multiple engineering teams, ensuring the security of our products and infrastructure by triaging security issues, reviewing system architectures, and coordinating external security scans and vulnerability

remediation efforts. You will play a pivotal role in safeguarding our AWS cloud products and maintaining robust security protocols.

What You’ll Do:

Implement Product Security designs and implement enterprise-class security systems for production environments.
Integrate application security testing tools into the development and deployment pipeline, ensuring that every step of the SDLC follows security best practices.
Ensure adherence to standard regulatory and compliance requirements by overseeing regular 3rd party security audits and penetration testing.
Manage CI /CD processes, monitoring tooling like Wavefront and security tooling like WIZ
Understand Data Architectures and modeling, including data retention and privacy

What You Need to Succeed:

Hands-on experience coding on data architectures, microservices and CI/CD processes
Hands-on experience with Security tooling such as WIZ
Working experience with AWS and their security features. Ability to adapt to a dynamic and evolving cloud landscape, with a focus on scalability and flexibility in security solutions.
Experience with container hosting and container orchestration (Kubernetes, Docker)
Ability to coordinate and interpret external security scans.
Knowledge of security frameworks and standards (e.g., ISO 27001, NIST, HIPAA, TISAX).

Additional Skills That Could Set You Apart:

AZ500/SC100, CKS/CKA, AWS Certified Security – Specialty, CISSP certifications are a plus.
Mindset of continuous delivery and all things automated.

How we hire:

Sitecore is proud to be an equal-opportunity workplace. We are committed to equal employment opportunity without unlawful regard to race, color, ancestry, religion, gender, national origin, sexual orientation, age, citizenship, marital status, disability, veteran status or any other local legally protected characteristic.