Product Security Engineer

Responsibilities

• Implement and maintain static application security testing (SAST) using Semgrep across our repositories
• Configure and improve software composition analysis (SCA) tooling (Dependabot) to identify vulnerable dependencies
• Manage secrets detection scanning (Trufflehog) and respond to findings
• Integrate security scanning into CI/CD pipelines (GitHub Actions) to catch issues before code is merged
• Triage and prioritize vulnerability findings, working with engineering teams to drive remediation

Benefits

• Health Insurance

Culture