Amazon.com

Job summaryThe Devices and Services (D&amp;S) Trust &amp; Security team works to ensure that our devices and services are designed and implemented to the high standards required to maintain and enhance customer trust. Security and Privacy are paramount to maintaining trust and we need to continue to build trusted products, maintain and operate trusted environments, and advocate trust to customers and stakeholders. The team develops security automation for devices &amp; services, performs penetration testing, and handles and tracks incident responses to resolution. The Trust team is responsible for enabling business growth and innovation while honoring data policies and controls that help protect customer trust. We are responsible for defining and executing on the security and privacy requirements across the entire organization.Are you interested in being part of a top-notch security team covering all Amazon consumer devices (including hardware and low-level functionality) as well as key Amazon services supporting our consumer devices (such as Computer Vision, AppStore, Device Registration, Kindle, etc.)? Amazon Lab126 is looking for skilled and exceptional security researchers to find security issues in our products to better protect our customers. Your work directly impacts the way our customers, teams, and business across the globe get things done. If you care deeply about keeping customers safe, then we have a job for you! You can learn more about security at Lab 126 here: https://www.youtube.com/watch?v=k0UTTxzeGogKey job responsibilitiesIn this role, you will be part of a dedicated team of passionate security engineers performing vulnerability research to detect high impact issues in Amazon consumer products. You will work on identifying vulnerabilities in diverse product stacks spanning multiple architectures, SoCs to identify vulnerabilities in low level embedded software, operating systems, applications, peripherals or web client, web sites, and cloud services as well as introduce defenses to raise the effort for attackers. You will identify detective and preventative technology and automation to reduce the impact of security threats in advance and be directly involved in our response to critical security issues. You will work with security stakeholders within the company, security research community and partner organizations across the ecosystem to address security issues collaboration with product teams and to do the right thing for our organization. You will lead gap analysis efforts to identify learnings to improve product security. You're well-known for your excellent prioritization skills as well as your ability to communicate at all levels of an organization. If you're passionate about finding security bugs, analyzing security exploits, and enjoy seeing your work's impact across Amazon consumer products and services, then this position is for you. A day in the life• Perform vulnerability detection using variety of automated static, dynamic analysis as well as custom tooling (e.g. static analyzers, fuzzers, scanners, analyzers, etc.) to identify device or web services, vulnerabilities and develop proof of concept exploits.• Conduct campaigns to identify vulnerabilities in various platforms, technology stacks across devices (Android based, real time operating systems, protocols - Wi-Fi, BT, RF) and services (web services, cloud infrastructure and mobile applications)• Advocate for raising security bar for product teams by recommending security fixes, technical solutions and designs to enable product teams to mitigate classes of security vulnerabilities.• Perform analysis of publicly reported vulnerabilities and attacks to synthesize areas of proactive focus spanning product stacks.• Develop detailed technical documentation describing identified vulnerabilities, associated impact as well as recommendations for communication with internal engineering stakeholders as well as leadership• Perform analysis of reported issues and work with product, partner and vendor teams to remediate vulnerabilities. <h3>Basic Qualifications</h3>• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cyber Security or a related field• 7+ years relevant work experience• 2+ year of development experience in C, C++, assembly (x86, x86-64, ARM) and/or Java• Experience with at least one scripting language (e.g. python, ruby, bash, JavaScript, Go)<h3>Preferred Qualifications</h3>Master’s degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent. Candidates with experience in at least one of the areas is preferred. • Experience in performing vulnerability research and reporting vulnerabilities in widely used software or sharing contributions via public research, blogging, and presentations with the security community. • Experience in embedded/IoT device security or web services security specifically, with experience of performing software security audits, vulnerability discovery and analysis. • Experience with common software security vulnerabilities and methods of exploitation, such as memory corruption, privilege escalation, web application exploitation, file format vulnerabilities, protocol-based weaknesses, etc.• Experience with static and dynamic tools for vulnerability detection and exploit mitigation techniques• Experience with extracting firmware, reverse engineering a variety of hardware and software, including firmware, operating systems, and applications, binary analysis and proof of concept exploit development. • Knowledge of common wireless connectivity protocols with focus on protocol or implementation security vulnerabilities (e.g. Bluetooth, Wi-Fi, 802.15.4, Zigbee) or hardware security mechanisms, including secure boot, trusted execution environments or operating system internals and associated security issues with emphasis on Linux, Android and common RTOS environments• Experience with analysis tools such as IDA, Ghidra, Radare, Burp Suite, and network traffic dissectors such as Wireshark.o Experience with service-oriented architecture, web services security, AWS/cloud infrastructure securityo Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols and applied cryptography.o Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)keyword:digitalsecurityAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.Pursuant to the Los Angeles Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

California

Senior Security Vulnerability Researcher

Chainalysis

Like the brakes on a car, the Security team’s mission is to enable Chainalysis to accelerate with confidence. Our Vision is to build an environment where Information Security risks are identified, understood, and led to an acceptable level across Chainalysis. We have the tools, resources, and expertise to make optimal decisions for business success.
We're looking for Senior Product Security Engineers who are instinctively driven to improve the environment around them whether that be infrastructure, systems, or methodologies. Curiosity and an instinct to search for ways to reduce the likelihood and impact of a breach of confidentiality, integrity or availability are key.  We measure their success by the ability to secure and empower the organization to build, deploy, and maintain secure services and products while creating a positive impact on our security posture and culture. 
In one year you’ll know you were successful if you’ve…
<ul>
<li>Developed a Product Security program that collaborated with partners, has clearly scoped projects, made data driven decisions, and emulate a positive security culture</li>
<li>Completed a vulnerability management program with a defined methodology and low friction implementation</li>
<li>Enhanced security architecture review process through the technical expertise and threat modeling to provide practical guidance</li>
<li>Conducted regular penetration tests, application and cloud security assessments to identify configuration drift, misconfigurations, multi-step chained vulnerabilities</li>
<li>Collected and prepared metrics to identify trends, opportunities of improvement, and executive summaries</li>
<li>Liaised and partnered with leadership and engineers to increase the adoption of security throughout and earlier in the software development lifecycle</li>
<li>Lead, support and grow a product security team through coaching, mentorship, cross-collaborating training </li>
</ul>
A background like this helps: 
<ul>
<li>Strong fundamental knowledge and experience in assessing, building, auditing, and securing solutions for a wide range of technologies.</li>
<li>Experience scoping and completing large cross-functional projects</li>
<li>Proven success in building strategic partnerships across multiple teams within an organization</li>
<li>Confident in navigating ambiguity and evolving, innovative technologies including Web3 </li>
<li>Experience building out Product Security programs in fast moving environments</li>
<li>Collaborating with cross-functional partners to build comprehensive solutions</li>
<li>Background securing cloud-native environments and SaaS technologies</li>
<li>Demonstrated domain expertise across multiple disciplines (Development, On-Prem &amp; Cloud Solutions, CI/CD pipelines, Application Security, Vulnerability Management)</li>
<li>Mentor with the ability to explain the “why” behind decisions and technical concepts</li>
</ul>At Chainalysis, we help government agencies, cryptocurrency businesses, and financial institutions track and investigate illicit activity on the blockchain, allowing them to engage confidently with cryptocurrency. We take care of our people with great benefits, professional development opportunities, and fun.
You belong here. 
At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. Some of the ways we’re ensuring we keep learning are an internal Diversity Committee, Days of Reflection throughout the year including International Women’s Day, Juneteenth, Harvey Milk Day, and International Migrant’s Day, and a commitment to continue revisiting and reevaluating our diversity culture. 
We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. Additionally, if you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more <a href="https://go.chainalysis.com/rs/503-FAP-074/images/Interview%20Accommodations%20Request.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. We can’t wait to meet you.  
Applying from the EU? Please review our <a href="https://go.chainalysis.com/rs/503-FAP-074/images/GDPR%20Notice.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Candidate GDPR Notice.</a>

By submitting this application, I consent to and authorize Chainalysis to contact my former employers, and any and all other persons and organizations for information bearing upon my qualifications for employment.  I further authorize the listed employers, schools and personal references to give Chainalysis (without further notice to me) any and all information about my previous employment and education, along with other pertinent information they may have, and hereby waive any actions which I may have against either party(ies) for providing a reference.  I understand any future employment will be contingent on the Company receiving satisfactory employment references.

Chainalysis COVID-19 Policy - USA
All employees are required to have or obtain a COVID-19 vaccination as a condition of employment at Chainalysis, unless an exemption has been approved. All employees shall be required to report their vaccine status. All new employees shall be required to provide proof of their vaccination status prior to the start of their employment.  
Chainalysis COVID-19 Policy - EMEAAs an employer, Chainalysis is obliged to ensure a healthy and safe working environment. This means that we must try to prevent the coronavirus from spreading inside the workplace and all employees are obliged to follow the local regulations issued by the relevant health authorities.  
<ul>
<li>To help support a safe work environment, we encourage all employees in EMEA to get fully vaccinated against COVID-19.</li>
<li>Employees will not be required to attend an event or in-person customer meeting. </li>
<li>Employees in the EU and the UK are allowed to travel internationally for internal meetings to any country deemed “green or amber” by the EU and the UK authorities. All attendees for Chainalysis in-person events or meetings will be required to adhere to the following guidelines:  
<ul>
<li>International travel will only be permitted if you receive approval from both your manager and Executive Leader</li>
<li>You must familiarize yourself and comply with any screening/safety protocols imposed by the entity/individual hosting the in-person meeting or event</li>
<li>You must comply with any and all safety guidelines and travel restrictions established by applicable law  </li>
<li>If you are in close or proximate contact with others at the event/customer site and test positive for COVID-19, you must immediately notify the People Team and avoid contact with others for 10 days</li>
</ul>
</li>
</ul>
Chainalysis COVID-19 Policy - APACWith circumstances changing on a regular basis and parts of our APAC team going in and out of mandatory lockdown, APAC will continue to follow country legislation and guidelines.

New York

Washington

United States

Senior Product Security Engineer

Demandbase, Inc.

Introduction to Demandbase:
Demandbase is the Smarter GTM™ company for B2B brands. We help marketing and sales teams overcome the disruptive data and technology fragmentation that inhibits insight and forces them to spam their prospects. We do this by injecting Account Intelligence into every step of the buyer journey, wherever our clients interact with customers, and by helping them orchestrate every action across systems and channels - through advertising, account-based experience, and sales motions. The result? You spot opportunities earlier, engage with them more intelligently, and close deals faster. 
As a company, we’re as committed to growing careers as we are to building world-class technology. We invest heavily in people, our culture, and the community around us. We have offices in the San Francisco Bay Area, New York, Seattle, and teams in the UK and India, and allow employees to work remotely. We have also been continuously recognized as one of the best places to work in the San Francisco Bay Area.
We're committed to attracting, developing, retaining, and promoting a diverse workforce. By ensuring that every Demandbase employee is able to bring a diversity of talents to work, we're increasingly capable of living out our mission to transform how B2B goes to market. We encourage people from historically underrepresented backgrounds and all walks of life to apply. Come grow with us at Demandbase!

About the Role:
At Demandbase, earning and maintaining customer trust is critical. We’re looking for a Sr. Director of Product Security to own everything that goes into building a secure SaaS product. You’ll report directly to the CISO and inherit an established application &amp; cloud security team. You’ll use your security domain expertise, technical depth, and experience to collaborate with Product, Engineering, Operations, GRC, and Sales to weave prudent product security decisions into everything we do. 
This leadership role comes with broad program management responsibilities that include application security, cloud security, vulnerability management, risk assessment, and sales support. We’re a remote-first company, and this role can be based anywhere in the United States, with occasional travel to collaborate in person (as guidelines allow).
What you’ll be doing:
<ul>
<li>Define &amp; promulgate a unifying vision for product security at Demandbase</li>
<li>Collaborate with the Product team to set both strategic and tactical product security requirements to delight our customers and earn their trust</li>
<li>Support engineers throughout the development lifecycle and make it easy for them to build secure products</li>
<li>Guide the evolution of our cloud architecture and operations to enable efficient security practices</li>
<li>Own the vulnerability management program for our products, including assessment, triage, and remediation accountability, for both infrastructure and application issues</li>
<li>Be a proponent of high standards and engineering excellence, both within the security team and across all of Demandbase</li>
<li>Lead &amp; mentor a global team of security engineers and architects who support you in pursuit of these goals</li>
</ul>
 What we’re looking for:
<ul>
<li>10+ years of security experience, including cloud &amp; application security</li>
<li>Domain expertise in cloud architecture &amp; security </li>
<li>Vulnerability assessment and penetration testing experience</li>
<li>Demonstrated ability to select, manage, and collaborate with external vendors </li>
<li>Familiarity with compliance and risk management frameworks and processes</li>
<li>Proven experience building, coaching, managing and retaining a team.</li>
<li>Strong analytical skills and experience using data to drive impactful insights and decisions</li>
<li>Ability to collaborate well with diverse partners, influence without direct authority, and build strong relationships across teams</li>
<li>Strong verbal and written communication skills to communicate complex program, processes, recommendations, and data to audiences across functions, teams, and organizational levels</li>
<li>Strategic thinker, with strong program and project management skills and attention to detail</li>
<li>Experienced and articulate professional, to be customer-facing (as needed) to support the sales process</li>
</ul>
Benefits:
Our benefits include options for up to 100% paid Medical, Dental, and Vision premiums for you and your entire family, $1,000 personal development stipend, flexible PTO policy, no internal meeting Fridays, Modern Health mental wellness platform, Headspace, Ginger, and 13 paid holidays and 2 additional weeks where all Demandbase employees take off (week of July 4th and Thanksgiving). Plus 401(k), short-term/long-term disability, life insurance, and all those good things.

Sr. Director, Product Security

Stripe

<h3>Who we are</h3>
<h3>About Stripe</h3>
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
<h3>About the team</h3>
Our Product Security team works on secure-by-design and deep product partnership. We build strong relationships with other teams and help them build secure software. This includes reviewing early-stage designs, helping develop threat models, scaling impact by curating security patterns, guidance, training; and championing security initiatives.
Some examples of the teams and critical initiatives you might be involved in partnering with:
<ul>
<li>Link, Stripe’s first consumer focused product providing a B2C option at global scale</li>
<li>Better building blocks to accept payments, move funds, and exchange between fiat and crypto</li>
<li>Stripes Core Products ranging from Connect, Subscriptions, Checkout, and more.</li>
</ul>

<h3>What you’ll do</h3>
<h3>Responsibilities</h3>
<ul>
<li>Work closely with product engineering teams to design solutions that are secure by default</li>
<li>Be a security subject matter expert and able to tailor answers to security questions from non-engineers and engineers, alike</li>
<li>Lead threat modeling discussions and help teams strike the right balance between security, user experience and product advancement</li>
<li>Drive high impact, cross-team security initiatives </li>
<li>Scale security effort by empowering engineering teams with the right guidance, patterns and training</li>
<li>Develop a deep understanding of Stripe’s security primitives, frameworks, and invariants</li>
<li>Mentor teammates and others across the organization</li>
</ul>

<h3>Who you are</h3>
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
<h3>Minimum requirements</h3>
<ul>
<li>5+ years of security engineering experience</li>
<li>Strong communication skills, is accustomed to working closely with engineering teams and has the ability to influence key decisions</li>
<li>Breadth of applied knowledge across application security</li>
<li>Software engineering experience in a production environment across multiple programming languages</li>
<li>The ability to think like an attacker, develop threat models and help teams reason through different approaches to reducing risk</li>
<li>A desire to sub-linearly scale security through simple design, abstraction and education</li>
</ul>

North America

Product Security Engineer

Span.IO, Inc.

Our Mission  
SPAN develops products that accelerate the rapid adoption of renewable energy in the home. The flagship SPAN Smart Panel is the first true evolution for the traditional home electric panel, harnessing enhanced technology for metering, monitoring, and control. An expanded product suite of intelligent, integrated solutions radically lowers the cost and complexity of energy upgrades–including solar, batteries and EVs–empowering homeowners to be active, resilient and informed players in the energy market. 
The Role
The Information Security Intern will proactively work with internal stakeholders to identify security risks and implement practices that meet standards for information security. 
Responsibilities
The primary responsibility of the Information Security Intern include:
<ul>
<li>Application Security - Perform manual and automated security testing. </li>
<li>Cloud Security - Help with securing the production environment hosted in AWS.</li>
<li>IoT Security - Help secure firmware and hardware for an IoT product</li>
<li>Security Controls Development - Assist with the development of security controls and associated control procedures.</li>
<li>Security/Compliance Project Management - Assist with security and compliance project management activities on as needed basis.</li>
</ul>
<h3>About You</h3>
Required Qualifications:
<ol>
<li>Bachelor or Masters students pursuing a degree in business, information systems management, information security or computer science </li>
<li>Basic understanding of networking, operating systems, access control, databases, and application types</li>
<li>Basic understanding of Network Security (e.g. firewalls, IDS/IPS etc.) and Application Security (e.g. OWASP Top 10)</li>
<li>Basic understanding of compliance standards e.g. ISO 27001, SOX, PCI DSS, HIPAA, FISMA/FedRAMP, SOC1 (SSAE16), SOC2 and EU Privacy regulations</li>
<li>Security certifications like CISSP, CISA, CISM, CIPP, GIAC, OSCP are preferred but not required.</li>
<li>Excellent written and oral communication skills</li>
</ol>
<h3>Life at SPAN</h3>
SPAN embraces diversity and equal opportunity in a serious way. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. 
Headquartered in San Francisco’s vibrant SoMa neighborhood, we are an eclectic group of creative thinkers who value open communication, teamwork, and a ‘make it happen’ approach to addressing complex challenges. 
Our CEO, Arch Rao⁠—former head of the Tesla Powerwall team⁠—fosters an energetic and collaborative environment, with a strong emphasis on maintaining work-life-balance across the organization.
We’re hiring talented individuals who are driven by success and are passionate about shaping the future of renewable energy. If that sounds like you, we’d love for you to consider joining the rapidly growing team at SPAN.
The Perks:
⚡ Competitive compensation + equity grants at a well-funded, venture-backed company
⚡ Comprehensive benefits (including medical; dental, vision, life and disability insurance)
⚡ Comfortable, sunny office space located near BART and Caltrain public transit
⚡ Strong focus on team building and company culture (events, meet-ups, clubs)
⚡ Flexible hours and unlimited PTO
Our Mission &amp; Values:
At SPAN, we believe that powering your home with clean energy should be a simple and delightful experience that is at its essence human-centered and technology-forward.
Our core values include:
<ul>
<li>Making home energy more accessible, intuitive, and convenient.</li>
<li>Enabling homes and vehicles to be powered by the sun.</li>
<li>Building resilient homes with reliable power.</li>
<li>All-electric everything.</li>
<li>A more flexible &amp; distributed grid.</li>
</ul>
Interested in joining our team? Submit an application today and we’ll be in touch with next steps!

San Francisco

Information Security Internship

Apply to Product Security Cyber Security Jobs in companies remotely and near you. New Product Security Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior Security Vulnerability Researcher at Amazon.com	Remote Full Time Javascript Android Audits
Senior Product Security Engineer at Chainalysis	Remote Full Time Manager Application Security Auditing
Sr. Director, Product Security at Demandbase, Inc.	Remote Full Time CISO Application Security Cloud
Product Security Engineer at Stripe	Remote Full Time Application Security Crypto Product Security
Information Security Internship at Span.IO, Inc.	Internship CISM Application Security AWS CIPP

Product Security Cyber Security Jobs

0 Product Security Cyber Security Jobs. Page 1 of 1

5 closed product security cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Product Security Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Product Security Cyber Security Jobs

0 Product Security Cyber Security Jobs. Page 1 of 1

5 closed product security cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Product Security Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter