Product Security Engineer Job at iO Associates - US, New York, NY

akNYS3J3ZW5XUWUwU25OM29UV3lMeGZoalE9PQ==
  • iO Associates - US
  • New York, NY

Job Description


Product Security Engineer

A leading technology-driven Financial Services organization is seeking a skilled and motivated Product Security Engineer to help ensure the security and resilience of its platforms. This role spans four key areas: Application Security, Cloud Security, DevSecOps, and Threat & Vulnerability Management .

Responsibilities:


  • Application Security : Conduct secure code reviews, design assessments, and security testing to identify and remediate vulnerabilities.

  • Cloud Security : Evaluate cloud architectures (primarily AWS), assess configurations, and implement controls to defend against evolving threats.

  • DevSecOps : Embed security into the software development lifecycle; automate controls within CI/CD pipelines.

  • Threat & Vulnerability Management : Lead threat modeling, manage vulnerability scans, and coordinate remediation efforts across production workloads.


You will work closely with software engineering, DevOps, and infrastructure teams to build secure products and environments.

Qualifications:


  • 5+ years in cybersecurity and secure software development

  • Strong programming/scripting skills (e.g., Java, Python, Go, JavaScript)

  • Expertise in secure coding, threat modeling, and code analysis

  • Experience with cloud security (especially AWS) and Kubernetes

  • Proficiency in vulnerability management tools and secure SDLC practices

  • Familiarity with SAST, SCA, and DAST tools

Preferred Experience:


  • Background as a developer on high-performing teams

  • DevSecOps and automated security in CI/CD pipelines

  • Regulated industry experience (preferably Finance/Crypto)

  • Knowledge of IaC (Terraform, CloudFormation), secrets management, SPIFFE/SPIRE, Zanzibar/SpiceDB

  • Experience in distributed system debugging

  • Prior consultancy experience or published security research (e.g., CVEs)


This role is ideal for professionals who are passionate about security, eager to learn, and thrive in dynamic, cross-functional environments.

For full transparency, only US Citizens & Green Card Holders Only are able to be considered for this vacancy.

Job Tags

Similar Jobs

Anderson Sport and Wellness

Pre Physical Therapy Internship (paid position) Job at Anderson Sport and Wellness

 ...Wellness in Newport Beach, CA is seeking students who are interested in gaining experience in the medical setting to join our paid outpatient orthopedic physical therapy internship. No previousexperience required. Schedule is flexible. There are two tracks for... 

Americaribe LLC

Junior Design Manager Job at Americaribe LLC

 ...JUNIOR DESIGN MANAGER At Americaribe, we are more than builderswe are innovators, problem-solvers, and teammates. Building for Life means creating structures that stand the test of time while fostering a workplace where talent thrives. We take pride in our culture... 

Intermountain Health

Ultrasound Tech $5,000 Sign On Bonus Job at Intermountain Health

 ...The Ultrasound Tech provides excellent customer service by performing ultrasound examinations under...  ...time stamps and image storage. Shift Details *Up to $5,000 Sign on bonus for...  ...candidate. ~ Full time (36 hours a week)~ Night shift (Friday, Saturday & Sunday) *Shift... 

eSimplicity

Junior Salesforce Developer Job at eSimplicity

 ...the user interface Designing data models and implementing Salesforce objects, including custom objects, fields, and relationships...  ...concepts in Security, DevSecOps and Agile principles ~ Experience developing reporting and dashboards in Salesforce ~ Excellent... 

Crescent Solutions

Senior DevOps/ Cloud Infrastructure Engineer Job at Crescent Solutions

 ...No 3rd Parties No Visa Candidates Title: Senior DevOps / Cloud Infrastructure Engineer Location: Los Angeles, CA (Onsite, 5 days/week) We are seeking a highly motivated, innovative, and collaborative technologist to serve as a Senior DevOps / Cloud Infrastructure...