Senior Product Security Engineer

Lead product security strategy, architecture, secure development lifecycle practices, application and API security assessments, vulnerability management, monitoring support, tooling, documentation, training, and guidance for secure AI-assisted development.

Responsibilities

• Lead security design and architecture reviews for web, mobile, and cloud-based applications
• Define product security requirements, risk tolerances, and security roadmaps with product and engineering leadership
• Conduct threat modeling workshops and drive mitigations into product design
• Review security for products and services deployed across AWS, Azure, and GCP
• Own and mature the application and product security lifecycle
• Drive automated security checks in CI/CD pipelines
• Lead application security testing and prioritize remediation findings with development teams
• Establish secure coding standards, patterns, and reusable frameworks
• Lead API security assessments and review API gateway configurations
• Integrate product logs, alerts, and events into monitoring and incident response workflows
• Own vulnerability triage and management for product and application findings
• Ensure sensitive data is handled according to security requirements
• Evaluate and implement product security tools and services
• Develop security documentation, playbooks, and training
• Provide best practices for secure use of AI-assisted development tools

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience
• 5+ years of experience in security engineering, application security, or product-aligned security roles
• Understanding of web, mobile, and API vulnerabilities, including OWASP Top 10
• Experience securing applications and services in a major cloud provider, with AWS preferred
• Experience with application security tooling and CI/CD integration
• Familiarity with Terraform review, GitHub Actions security, and secrets management
• Familiarity with container security, including image hardening, Kubernetes RBAC, network policies, and runtime protection
• Familiarity with securing AI/ML platforms and agentic workflows
• Experience collaborating with software engineering teams in agile environments
• Knowledge of identity, authentication, and authorization technologies including OAuth, OIDC, and SSO
• Communication and stakeholder management skills

Benefits

• The opportunity to work at a leading global entertainment company
• Access to tools, leadership, and resources to create and drive a center of excellence
• The opportunity to do the best work of your career
• Inclusive and diverse company culture
• Competitive programs to support well-being
• Collaborative environment with room to grow