Sobre esta vaga de Product Security Engineer (LF) na Perforce
Position Summary:
As a Product Security Engineer, you will partner closely with developers to identify, triage, and drive remediation of security vulnerabilities across our products.
This hands-on role owns vulnerability triage across sources such as customer reports, security researchers, automated scanning tools, and penetration tests, and helps teams assess risk, prioritize fixes, and improve overall security posture.
You will also use AI tools to accelerate analysis, while supporting security reviews, threat modeling, and secure development practices across both the SDLC and emerging AI-assisted development workflows.
Success in this role requires strong attention to detail, curiosity to research new technologies, and effective collaboration with development teams. You will provide clear, actionable security feedback that helps teams improve efficiency and outcomes. You’ll thrive here if you’re proactive, resourceful, and eager to learn, with a focus on enabling teams to build secure, resilient products.
Responsibilities:
- Review and triage vulnerabilities from multiple sources including customer-reported issues, security researchers, automated scanning tools, and penetration testing results
- Assess severity and potential impact, including CVEs and third-party component risks
- Partner with developers to explain findings in clear terms, identify root causes, and drive timely remediation
- Track and validate fixes
- Developer Collaboration
- Work closely with engineering teams to integrate security into daily workflows
- Support developers in understanding secure coding practices and common vulnerability patterns
- Participate in security reviews and provide actionable feedback
- Threat Modeling & Security Reviews
- Assist in threat modeling to identify potential risks early in the design phase
- Support architecture and design reviews with a security perspective
- Help ensure security is considered as part of feature development
- Security in the SDLC/AIDLC
- Contribute to integrating security into the SDLC and evolving AI-driven development processes (often referred to as AIDLC)
- Help implement and improve secure development practices in CI/CD pipelines
- Support adoption of security tools and ensure findings are actionable
- AI-Assisted Security & Development
- Use AI tools to improve vulnerability triage and analysis, accelerate security reviews and documentation, and identify patterns to reduce manual effort
- Collaborate with engineering teams that are adopting AI-assisted development workflows
- Continuously explore ways to use AI to improve security processes and efficiency
Requirements:
- Static or dynamic analysis tools
- Software composition analysis (SCA)
- Container or dependency scanning
- Understanding of software development processes and working with developers
- Strong problem-solving and analytical skills
- Effective written and verbal communication skills
- Experience using AI tools to improve workflows or processes
- Examples may include automating analysis, improving productivity, or enhancing development/security tasks
