Senior Product Security Engineer at Mirantis

Mirantis

Remote, OR, us·1d ago

SeniorFull-timeCI/CD

Salary Range

$132,600 - $179,400 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

Mirantis is seeking a Product Security Engineer to help secure their portfolio of products and services, including enterprise software and critical infrastructure. This role is part of their growing Product Security program and will play a key role in implementing security controls and ensuring a secure software development lifecycle.

Key Responsibilities

→Design, implement, and maintain security controls across applications, infrastructure, and CI/CD pipelines.
→Embed security requirements aligned with SOC 2, ISO 27001, and internal standards.
→Drive adoption and operationalization of SAST, DAST, container scanning, IaC security, and dependency analysis tooling.
→Integrate automated security testing into the SDLC to enable secure-by-design development.
→Lead application security reviews, threat modeling, vulnerability assessments, and penetration testing.
→Validate and prioritize findings based on exploitability and business impact.
→Partner with engineering teams to ensure timely, measurable remediation.
→Support investigation of product and infrastructure security incidents.
→Contribute to root cause analysis and durable remediation strategies.
→Support product-level security reviews and audit activities.
→Coordinate evidence collection and control validation for SOC 2, ISO 27001, and enterprise requirements.
→Develop and maintain security expertise across multiple Mirantis products.
→Champion secure design principles and modern application security practices.

Requirements

✓Experience with security controls across applications, infrastructure, and CI/CD pipelines.
✓Knowledge of SOC 2, ISO 27001, and internal security standards.
✓Familiarity with SAST, DAST, container scanning, IaC security, and dependency analysis tooling.
✓Experience with threat modeling, vulnerability assessments, and penetration testing.
✓Ability to lead application security reviews and remediation efforts.
✓Experience with incident response and root cause analysis.
✓Strong understanding of compliance requirements and audit activities.