Product Security Engineer

3 Months ago • All levels

Job Summary

Job Description

As a Product Security Engineer, you will work with multiple engineering teams to ensure the security of products and infrastructure. You will triage security issues, review system architectures, and coordinate external security scans and vulnerability remediation efforts. The role involves safeguarding AWS cloud products and maintaining robust security protocols. Responsibilities include implementing security designs, integrating security testing tools into the development pipeline, ensuring adherence to compliance requirements through audits and penetration testing, and managing CI/CD processes and security tooling.

Must have:

Experience coding on data architectures, microservices and CI/CD
Experience with Security tooling such as WIZ
Working experience with AWS and its security features
Experience with container hosting and container orchestration
Ability to coordinate and interpret external security scans
Knowledge of security frameworks and standards

Good to have:

AZ500/SC100, CKS/CKA, AWS Certified Security – Specialty, CISSP certifications
Mindset of continuous delivery and all things automated

11 skills required

11 skills required for this role

Add these skills to join the top 1% applicants for this job

ci-cd

kubernetes

microservices

aws

docker

data-analytics

security-testing

software-development-lifecycle-sdlc

scalability

saas-business-models

ethical-hacking

Job Details

About Us:

Sitecore’s mission is to provide cutting-edge DXP solutions that enable the world’s greatest brands to craft truly unforgettable experiences for their customers. A highly decorated industry leader, Sitecore brings content, commerce, and data into one connected platform that delivers millions of digital experiences every day. Thousands of blue-chip companies, including American Express, Porsche, Starbucks, L’Oréal, and Volvo Cars, rely on Sitecore to provide more engaging, personalized customer experiences. Under the leadership of our new product-centric CEO, we are poised to continue to push the boundaries of marketing technology and shape the future of customer engagement. Learn more at Sitecore.com.

Engagement Stream products & team:

The Engagement Stream is a suite of SaaS products which enables our brands to understand users experiences — explore customer data management and audiences across multiple channels, deliver tested, personalized, and optimized experiences, transform site search experience that suggests and predicts relevant content and products as users type their search terms. These SAAS native products run on AWS based Cloud Infrastructure and consist of highly scalable data pipelines, orchestration, microservices, analytics platforms and rich user interfaces.

Our engineering teams are responsible for the services and pipelines for these data products from design through development, quality, performance, production deployments and operations and monitoring. The team is also responsible for driving architectural evolution, best practices, and guidance for running highly available and performant microservices.

It is a team of engineers with a mission to build a rock-solid service for Sitecore that supports 100s of engineers and 10s of millions of users today while continuing to scale rapidly.

About the Role:

We are looking for an experienced Product Security Engineer to work across the Engagement set of products. As a Product Security Engineer, you will partner with our multiple engineering teams, ensuring the security of our products and infrastructure by triaging security issues, reviewing system architectures, and coordinating external security scans and vulnerability

remediation efforts. You will play a pivotal role in safeguarding our AWS cloud products and maintaining robust security protocols.

What You’ll Do:

Implement Product Security designs and implement enterprise-class security systems for production environments.
Integrate application security testing tools into the development and deployment pipeline, ensuring that every step of the SDLC follows security best practices.
Ensure adherence to standard regulatory and compliance requirements by overseeing regular 3rd party security audits and penetration testing.
Manage CI /CD processes, monitoring tooling like Wavefront and security tooling like WIZ
Understand Data Architectures and modeling, including data retention and privacy

What You Need to Succeed:

Hands-on experience coding on data architectures, microservices and CI/CD processes
Hands-on experience with Security tooling such as WIZ
Working experience with AWS and their security features. Ability to adapt to a dynamic and evolving cloud landscape, with a focus on scalability and flexibility in security solutions.
Experience with container hosting and container orchestration (Kubernetes, Docker)
Ability to coordinate and interpret external security scans.
Knowledge of security frameworks and standards (e.g., ISO 27001, NIST, HIPAA, TISAX).

Additional Skills That Could Set You Apart:

AZ500/SC100, CKS/CKA, AWS Certified Security – Specialty, CISSP certifications are a plus.
Mindset of continuous delivery and all things automated.

How we hire:

Sitecore is proud to be an equal-opportunity workplace. We are committed to equal employment opportunity without unlawful regard to race, color, ancestry, religion, gender, national origin, sexual orientation, age, citizenship, marital status, disability, veteran status or any other local legally protected characteristic.