ZipRecruiter

Log In

1

Product Security Code Review Engineer Jobs (NOW HIRING)

Zoom

$99 - $229/hr

What you can expect The Product Security Engineer is responsible for security design and reviews ... Conducting threat modeling, architecture review, security code review, security assessment, and ...

New

vercel.com

Product Security Engineer

San Francisco, CA · On-site

$208 - $312/hr

Secure Code Review: Conduct secure code reviews and security assessments on products and services ... By embedding security tooling into developer workflows, you will help catch issues early and reduce ...

Ondo Finance

Senior Security Engineer - Product Security

$117K - $160K/yr

You will read code, run threat models, review architecture proposals, own tooling, and push engineering teams to build products that are secure by default. You partner closely with adjacent security ...

Okta

Staff Product Security Engineer, Reviews

Bellevue, WA · On-site

$161K - $221K/yr

The Staff Product Security Engineer Opportunity As a Staff Product Security Engineer, you will play ... Expertise in identifying OWASP Top 10 / CWE Top 25 vulnerabilities through manual code review.

Rippling

Staff Product Security Engineer

Seattle, WA · On-site

$189K - $315K/yr

Our Product Security lead talked about the Future Application Security Engineers * Our Security ... Audit source code and perform code review for critical application changes * Mentor software ...

CBIZ

Senior Product Security Engineer

Independence, OH · Hybrid

... Product Security Engineer is a deeply technical, hands-on engineering and architect-level role ... Establish controls for AI-generated code review to ensure AI-assisted development does not bypass ...

Zoomcar

Product Security Engineer

Seattle, WA · On-site

$140 - $190/hr

As a Product Security Engineer, you will: * Collaborate with Product Engineering teams throughout ... Reviews, Secure Code Reviews, and manual testing to identify vulnerabilities. * Develop and ...

Superhuman

Product Security Engineer

Seattle, WA · On-site

$188K - $250K/yr

As a Product Security Engineer, you will: * Collaborate with Product Engineering teams throughout ... Reviews, Secure Code Reviews, and manual testing to identify vulnerabilities. * Develop and ...

Superhuman

Product Security Engineer

Seattle, WA · On-site

$140 - $210/hr

As a Product Security Engineer, you will: * Collaborate with Product Engineering teams throughout ... Reviews, Secure Code Reviews, and manual testing to identify vulnerabilities. * Develop and ...

Jobtailor

Product Security Engineer

California, MO · On-site

$140 - $190/hr

* Partner with engineering and product teams to perform threat modeling for new and existing features ... Conduct secure code reviews and security assessments on products and services built with Next.js ...

next page

Showing results 1-20

All JobsTechnology JobsSoftware JobsSoftware Quality Engineer JobsProduct Security Code Review Engineer Jobs

Product Security Code Review Engineer information

See salary details

$53K

$144.1K

$205K

How much do product security code review engineer jobs pay per year?

As of Aug 27, 2026, the average yearly pay for product security code review engineer in the United States is $144,072.00, according to ZipRecruiter salary data. Most workers in this role earn between $88,000.00 and $205,000.00 per year, depending on experience, location, and employer.

What is a product security code review engineer?

A Product Security Code Review Engineer is a cybersecurity professional responsible for analyzing and reviewing application source code to identify and mitigate security vulnerabilities. They work closely with development teams to ensure secure coding practices, review code for compliance with security standards, and recommend fixes for potential security issues. Their goal is to prevent security breaches by catching vulnerabilities early in the software development lifecycle.

What are the key skills and qualifications needed to thrive as a product security code review engineer?

To thrive as a Product Security Code Review Engineer, you need a deep understanding of secure coding practices, software development lifecycles, and vulnerability assessment, typically backed by a degree in computer science or a related field. Familiarity with static and dynamic analysis tools, code review platforms, and certifications like CISSP or OSCP is highly valuable. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for explaining security findings and collaborating with development teams. These skills and qualities are vital to identify, communicate, and mitigate security risks in code, ensuring the overall resilience of software products.

What are some typical challenges faced by product security code review engineers when coordinating with development teams?

Product Security Code Review Engineers often encounter challenges in balancing security priorities with project timelines and developer workflows. Effective communication is essential, as engineers must clearly explain vulnerabilities and remediation steps to developers who may have varying levels of security expertise. Additionally, they need to ensure that security recommendations are practical and align with the product's architecture, all while fostering a collaborative environment rather than creating bottlenecks. Building strong relationships with development teams and understanding their processes helps streamline secure code adoption and continuous improvement.

What is the difference between Product Security Code Review Engineer vs Software Security Engineer?

AspectProduct Security Code Review EngineerSoftware Security Engineer
Primary FocusReviewing and analyzing source code for security vulnerabilities in productsDesigning and implementing security measures across software systems
Skills & CertificationsSecure coding, code review, security standards (e.g., OWASP), certifications like CSSLPSecurity architecture, threat modeling, secure coding, certifications like CISSP
Work EnvironmentCollaborates with development teams during product developmentWorks on system-wide security strategies and architecture
Industry UsageCommon in product-based companies, especially in tech and cybersecurityFound in organizations focusing on overall security infrastructure

While both roles focus on security, the Product Security Code Review Engineer primarily reviews source code for vulnerabilities in specific products, whereas the Software Security Engineer develops and implements security strategies across software systems. The roles often overlap but differ in scope and focus.

More about Product Security Code Review Engineer jobs

What cities are hiring for Product Security Code Review Engineer jobs?

Cities with the most Product Security Code Review Engineer job openings:

What states have the most Product Security Code Review Engineer jobs?

States with the most job openings for Product Security Code Review Engineer jobs include:

What job categories do people searching Product Security Code Review Engineer jobs look for?

The top searched job categories for Product Security Code Review Engineer jobs are:

Product Security Code Review Engineer jobs near you
Infographic showing various Product Security Code Review Engineer job openings in the United States as of August 2026, with employment types broken down into 79% Full Time, 18% Part Time, 2% Contract, and 1% Nights. Highlights an 89% Physical, 2% Hybrid, and 9% Remote job distribution, with an average salary of $144,072 per year, or $69.3 per hour.

Software Developer - Security Code Review

Orlando, FL • On-site

ThreatLocker
Network Security • 201 - 500 employees

7.0

Company rating: 7.0 out of 10

Based on 6 frontline employees who took The Breakroom Quiz

198th of 246 rated software companies

Respectful managers

Learn new skills

Learn more about ThreatLockerexternal

Full-time

Re-posted 3 days ago

Job description

Job Summary:
ThreatLocker is a leader in endpoint protection technologies, providing enterprise-level cybersecurity tools. They are seeking a Security-Focused Software Developer to specialize in manual and automated code review for security vulnerabilities, ensuring secure coding practices and compliance with industry standards.
Responsibilities:
• Perform in-depth security-focused code reviews across various codebases and languages
• Identify common and advanced security vulnerabilities (e.g., injection, XSS, insecure deserialization, insecure APIs).
• Work closely with developers to educate and guide them in secure coding practices.
• Recommend fixes and mitigation strategies, ensuring adherence to security standards (e.g., OWASP Top 10, CWE, NIST).
• Collaborate with security engineers, architects, and DevSecOps teams to enhance code security posture.
• Maintain documentation of findings and track remediation status.
• Utilize static and dynamic analysis tools to supplement manual reviews.
• Participate in security audits, threat modeling, and secure code training sessions.
Qualifications:
Required:
• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
• 5+ years of experience in software development with at least 2 years in secure code review or application security.
• Strong understanding of secure software development lifecycle (SSDLC).
• Experience identifying and remediating vulnerabilities in code written in one or more languages (e.g., C/C++, C#, Swift, Java, JavaScript, Python).
• Familiarity with security tools such as SonarQube, Fortify, Checkmarx, Veracode, or similar.
• Knowledge of OWASP Top 10, CWE/SANS 25, and CVSS scoring.
• Strong analytical, communication, and documentation skills.
Preferred:
• Security certifications such as OSCP, CSSLP, CEH, or GWAPT.
• Experience in regulated environments (e.g., finance, healthcare, defense).
• Familiarity with threat modeling, penetration testing, or red/blue team operations.
Company:
ThreatLocker is a cybersecurity company that specializes in endpoint security and application whitelisting solutions. Founded in 2017, the company is headquartered in Orlando, USA, with a team of 501-1000 employees. The company is currently Late Stage.

What ThreatLocker employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply