Senior Product Security Engineer

Stack

Responsibilities

• ▹Own application security for assigned product/feature teams
• ▹Perform security testing and triage SAST, SCA, IAST, DAST, and penetration test findings
• ▹Use AI and MCP to build context-aware security guidance and automation
• ▹Provide remediation consulting to development teams
• ▹Support vulnerability management reporting and tracking
• ▹Coordinate third-party penetration testing engagements
• ▹Configure and manage security tools

Requirements

• ▹5+ years of application/product security experience
• ▹2+ years securing Java, Python, and/or JavaScript web applications
• ▹Knowledge of enterprise software architecture and cloud infrastructure
• ▹Experience with CI/CD concepts and integrated SAST/SCA/DAST tooling
• ▹Ability to identify vulnerabilities in source code and recommend remediations
• ▹Experience with Linux and containerization in cloud environments
• ▹Working knowledge of the OWASP Top 10
• ▹Bachelor's degree or equivalent related experience

Nice to have

• ▹Experience with AI security tooling and context-aware SSDLC automation
• ▹Understanding of AI privacy and governance in developer workflows
• ▹Experience building and using agentic AI systems
• ▹Familiarity with EU AI Act, SAIF, and ISO 42001

Soft skills

About the company

Collibra's Product Security team ensures the company delivers secure, resilient products and services to its customers.