Product Security Manager

Overview The Product Security Manager is an individual with solid hands-on technical understanding of enterprise security solutions, cloud infrastructure and services platforms (AWS & Azure), latest security regulations, security best practices and security threats.

In this individual contributor role, you will support various security initiatives in support of commercial software products from development through deployment and ongoing maintenance.

You’ll work with cross-functional teams to protect our products and users from emerging security threats throughout the security development lifecycle. The person assists the security team in improving the security measures, maintaining and enforcing security policies, and ensuring compliance.

Duties & Responsibilities Define and enforce security requirements for software products, features, and components.

Ensure security considerations are included in the product roadmap and development plans Design, perform, and maintain security analysis on commercial products throughout the product lifecycle including controls assessments, threat modeling, privacy impact assessments, SAST, DAST, and third-party application penetration testing Identify, assess, and prioritize product security risks Collaborate with cross-functional teams to perform vulnerability management of identified risks and implement strategies for mitigating identified risks Work cross-functionally to ensure that security tooling is embedded in the product CI/CD pipelines to adopt shift left security Collaborate with the product, engineering, and other stakeholders to lead WAF deployments and adoption initiatives as it relates to commercial product Track and report on product security performance, including effectiveness of security measures, incidents, and ongoing security improvements Participate in incident response activities as they relate to application security Skills Required Technical proficiency with software engineering methodologies such as peer re