Loading...
Mid LevelFull-timeRustAWSGCPAzureCI/CDAIAPI
Salary Range
$20,400 - $27,600 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We’re a growing SaaS startup building our security team from the ground up. We’re looking for a hands-on Product Security Engineer who enjoys breaking things (responsibly) and helping teams fix them fast.
Key Responsibilities
- →Actively test our SaaS product for security vulnerabilities across web apps, APIs, and cloud infrastructure.
- →Perform manual security testing and targeted penetration tests (beyond automated scanners).
- →Implement and help implement automated security test suites.
- →Identify abuse cases, business logic flaws, and real-world attack paths.
- →Work directly with engineers to reproduce issues and drive fixes.
- →Help introduce lightweight security practices into the development process (threat modeling, secure design reviews).
- →Validate fixes and ensure issues are fully resolved.
- →Stay current on new vulnerabilities, attack techniques, and SaaS-relevant threats.
Requirements
- ✓3–6 years of experience in application security, offensive security, or penetration testing.
- ✓Strong understanding of web and API security (OWASP Top 10, auth, sessions, access control).
- ✓Experience testing modern SaaS products.
- ✓Comfort working in cloud environments (AWS / GCP / Azure at a practical level).
- ✓Experience with common security testing tools (Burp Suite, Nuclei, etc.).
- ✓Ability to communicate findings clearly and pragmatically to engineers.
- ✓Self-starter mindset — comfortable operating with limited process and high ownership.
Free to sign up. Takes 30 seconds.
