Product Security Sr Engineer

About the role

As a Product Security Senior Engineer at Bamboohr, you will play a pivotal role in safeguarding our products and services from security threats. Your expertise will help shape our security posture and ensure that our offerings are resilient against potential vulnerabilities. You will collaborate closely with cross-functional teams to implement security best practices and drive initiatives that enhance our overall security framework. This position is ideal for someone passionate about security engineering and looking to make a significant impact in a dynamic environment.

Key facts

What you'll do

• Develop and implement security strategies that align with Bamboohr's product development lifecycle, ensuring security is integrated from the ground up.
• Conduct thorough security assessments and penetration testing on our products to identify vulnerabilities and recommend remediation strategies.
• Collaborate with software development teams to review code and architecture, providing guidance on secure coding practices and threat modeling.
• Monitor and analyze security incidents, providing timely responses and detailed reports to improve incident response protocols.
• Stay abreast of the latest security trends, vulnerabilities, and regulatory requirements to ensure compliance and best practices are maintained.
• Design and execute security training programs for technical and non-technical staff to foster a culture of security awareness within the organization.
• Work closely with product managers and stakeholders to assess security risks associated with new features and enhancements, ensuring that security considerations are prioritized.
• Lead security audits and assessments, both internal and external, to validate compliance with industry standards and regulations.
• Develop and maintain security documentation, including policies, procedures, and guidelines, to ensure clarity and consistency across the organization.
• Engage with external security communities and forums to share knowledge and learn from industry peers, enhancing Bamboohr's security reputation.
• Collaborate with incident response teams to investigate security breaches and develop strategies to prevent future occurrences.
• Participate in the design and implementation of security tools and technologies that enhance Bamboohr's security infrastructure.

Requirements

• A minimum of 5 years of experience in product security or a related field, with a strong focus on software security.
• Proven experience in conducting security assessments, penetration testing, and vulnerability management.
• Strong understanding of secure software development practices and familiarity with security frameworks such as OWASP, NIST, or ISO 27001.
• Proficiency in programming languages such as Python, Java, or C++, and experience with security tools like Burp Suite, Metasploit, or similar.
• Excellent analytical and problem-solving skills, with the ability to think critically about security challenges.
• Strong communication skills, both written and verbal, with the ability to convey complex security concepts to diverse audiences.

Nice to have

• Certifications such as CISSP, CEH, or OSCP would be advantageous.
• Experience with cloud security and familiarity with platforms like AWS, Azure, or Google Cloud.
• Knowledge of regulatory compliance standards such as GDPR, PCI-DSS, or HIPAA.
• Familiarity with DevSecOps practices and tools, integrating security into CI/CD pipelines.

Skills & tools

• Security assessment and penetration testing tools (e.g., Burp Suite, Nessus)
• Programming languages (e.g., Python, Java, C++)
• Security frameworks (e.g., OWASP, NIST)
• Incident response and threat intelligence tools
• Cloud security practices and tools

Practical notes

• This position is based in Capital Federal, Buenos Aires, and is a full-time role.
• The salary for this position will be competitive and commensurate with experience.
• Bamboohr is open to considering visa sponsorship for qualified candidates who meet the requirements for this role.
• Interested candidates can apply through the following link: [Apply here](https://modo.bamboohr.com/careers/358).

At Bamboohr, we are committed to fostering a diverse and inclusive workplace. We encourage applications from individuals of all backgrounds and experiences. Join us in our mission to build secure and innovative financial solutions that empower users.