SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Delinea is seeking a Principal Product Security Engineer to provide technical leadership and execution for an industry-leading Product Security Program. This role is critical to designing the overall strategy of Delinea's Product Security Program and will be responsible for performing secure design reviews, threat modeling, and offering consulting services across the organization.
You will work collaboratively with Enterprise Architecture, Development, DevOps, and Cloud engineering teams, balancing security with business objectives while driving technical ideas and communicating clearly with both technical and non-technical audiences. Key responsibilities include:
• Provide strong leadership and serve as a security thought leader across Delinea's product offerings
• Understand current product security program state and partner with the team to define future state and multi-year roadmaps
• Promote strategic direction and influence security architecture adoption in product strategy and roadmap
• Perform end-to-end security architecture reviews and leverage AI capabilities to augment team capabilities and coverage
• Conduct threat modeling, assess and document product risks and application designs
• Participate in expanding and maturing Delinea's Secure Software Development Lifecycle (S-SDLC) program
• Stay current on threat landscape, technologies, security compliance requirements, standards, and industry trends
• Develop baseline cloud, container, application, and infrastructure security standards and integrate into CI/CD pipeline
• Automate operational activities related to maintaining product and cloud security infrastructure
• Respond to and resolve or escalate security incidents
• Provide mentorship and guidance to Product Security team members
The role reports to the Sr. Director of Product Security and is fully remote within the US.
REQUIREMENTS:
• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)
• 12+ years of professional cybersecurity experience with minimum 7 years in Product Security role including Security Architecture, Threat Modeling, Secure Design, and AppSec tooling
• Well versed in current Product Security threat landscape and industry best practices
• Experience performing Threat Modeling and Product Security design reviews as part of SSDLC processes
• Technical expertise in: Cloud Security, Cryptography, Secure Design reviews and Threat Modeling, SaaS multi-tenant product architecture, REST APIs, Containers (Docker, Kubernetes), Security testing tool integration into development pipelines, Defect tracking systems (Jira, Bugzilla, ServiceNow), Source code management (ADO, GitLab, GitHub), Application security testing tools (SAST, DAST, IAST, SCA)
• Strong leadership, communication, and interpersonal skills with ability to influence stakeholders at all levels
• Strong analytical skills with ability to prioritize, manage competing demands, and meet deadlines
• Strong verbal and written communication skills with ability to describe technical security issues in plain language
PREFERRED QUALIFICATIONS:
• Experience leveraging AI capabilities to automate and augment Product Security tasks such as Threat Modeling and Secure Design reviews
• Strong understanding of cybersecurity frameworks, risk management principles, and industry standards (NIST, ISO 27001, CIS, GDPR)
• Solid understanding of cloud security technologies including container security, serverless security, network and application security, and access management
• Software engineering and/or development experience
• Cybersecurity certifications (CISSP, CSSLP, CISM, or similar)
• Proficiency with Azure and AWS
