Senior Product Security Engineer

We are looking for a Senior Product Security Engineer to join our team at Bonterra. The successful candidate will partner closely with product management, engineering, operations, and security teams to embed security into the software development lifecycle. Key responsibilities include threat modeling, security design reviews, and collaboration with cross-functional teams to identify and remediate security risks.

Requirements

• 5+ years of experience in product security, application security, or secure software engineering.
• Strong understanding of product architecture, APIs, and distributed systems.
• Experience performing threat modeling and security design reviews.
• Ability to assess security risk in the context of product functionality, customer experience, and business impact.
• Experience collaborating cross-functionally with product managers and engineering teams.
• Ability to influence and guide partners through collaboration rather than authority.
• Working knowledge of modern application development practices, CI/CD processes, and how security integrates into them.
• Familiarity with security tools including SAST, DAST, SCA, and related DevSecOps controls.
• Strong understanding of common web application vulnerabilities (e.g., OWASP Top 10), and secure design principles.
• Experience helping implementing security controls and automations within CI/CD pipelines.
• Strong communication skills with the ability to translate technical risks into clear, actionable guidance.
• Experience supporting interactions with external stakeholders such as customers, auditors, or partners on security-related topics.
• Familiarity with common compliance frameworks such as SOC 2, NIST, ISO 27001, PCI-DSS, and HIPAA.

Benefits

• Comprehensive benefits package
• Bonus and incentives
• Equity
• Comprehensive benefits program