ZipRecruiter

Log In

1

Product Security Code Review Engineer Jobs in California

Astranis

Product Security Engineer

San Francisco, CA · On-site

Product Security Engineer As a Product Security Engineer at Astranis, you are a software engineer ... Perform security code reviews and penetration testing on our web applications and services.

vercel.com

Product Security Engineer

San Francisco, CA · On-site

$208 - $312/hr

Secure Code Review: Conduct secure code reviews and security assessments on products and services ... By embedding security tooling into developer workflows, you will help catch issues early and reduce ...

Factory

Security Engineer

San Francisco, CA · On-site

... of our platform by conducting code reviews and implementing security best practices ... Required : • Minimum 5+ years of experience as a Security Engineer with a focus on product ...

Astranis

Product Security Engineer

San Francisco, CA · On-site

$130K - $215K/yr

Product Security Engineer As a Product Security Engineer at Astranis, you are a software engineer ... Perform security code reviews and penetration testing on our web applications and services.

Factory

Software Engineer, Security

San Francisco, CA · On-site

You will conduct in-depth code reviews, implement security best practices, and influence the ... Minimum 5+ years of experience as a Security Engineer with a focus on product security, with a ...

GBIT Inc

Mobility Application Security

Rancho Cordova, CA · On-site

$62.75 - $83.75/hr

... Code Review, Threat Assessment etc.) • Security Testing standards and checklist , 12+ Years of ... products • Experience with enterprise SSO and familiarity with OAuth, SAML, etc. is preferred.

next page

Showing results 1-20

All JobsProduct Security Code Review Engineer JobsProduct Security Code Review Engineer Jobs in California

Product Security Code Review Engineer information

What is a product security code review engineer?

A Product Security Code Review Engineer is a cybersecurity professional responsible for analyzing and reviewing application source code to identify and mitigate security vulnerabilities. They work closely with development teams to ensure secure coding practices, review code for compliance with security standards, and recommend fixes for potential security issues. Their goal is to prevent security breaches by catching vulnerabilities early in the software development lifecycle.

What are the key skills and qualifications needed to thrive as a product security code review engineer?

To thrive as a Product Security Code Review Engineer, you need a deep understanding of secure coding practices, software development lifecycles, and vulnerability assessment, typically backed by a degree in computer science or a related field. Familiarity with static and dynamic analysis tools, code review platforms, and certifications like CISSP or OSCP is highly valuable. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for explaining security findings and collaborating with development teams. These skills and qualities are vital to identify, communicate, and mitigate security risks in code, ensuring the overall resilience of software products.

What are some typical challenges faced by product security code review engineers when coordinating with development teams?

Product Security Code Review Engineers often encounter challenges in balancing security priorities with project timelines and developer workflows. Effective communication is essential, as engineers must clearly explain vulnerabilities and remediation steps to developers who may have varying levels of security expertise. Additionally, they need to ensure that security recommendations are practical and align with the product's architecture, all while fostering a collaborative environment rather than creating bottlenecks. Building strong relationships with development teams and understanding their processes helps streamline secure code adoption and continuous improvement.

What is the difference between Product Security Code Review Engineer vs Software Security Engineer?

AspectProduct Security Code Review EngineerSoftware Security Engineer
Primary FocusReviewing and analyzing source code for security vulnerabilities in productsDesigning and implementing security measures across software systems
Skills & CertificationsSecure coding, code review, security standards (e.g., OWASP), certifications like CSSLPSecurity architecture, threat modeling, secure coding, certifications like CISSP
Work EnvironmentCollaborates with development teams during product developmentWorks on system-wide security strategies and architecture
Industry UsageCommon in product-based companies, especially in tech and cybersecurityFound in organizations focusing on overall security infrastructure

While both roles focus on security, the Product Security Code Review Engineer primarily reviews source code for vulnerabilities in specific products, whereas the Software Security Engineer develops and implements security strategies across software systems. The roles often overlap but differ in scope and focus.

What are popular job titles related to Product Security Code Review Engineer jobs in California?

For Product Security Code Review Engineer jobs in California, the most frequently searched job titles are:

What job categories do people searching Product Security Code Review Engineer jobs in California look for?

The top searched job categories for Product Security Code Review Engineer jobs in California are:

What cities in California are hiring for Product Security Code Review Engineer jobs?

Cities in California with the most Product Security Code Review Engineer job openings:

Product Security Code Review Engineer jobs near you

Product Security Engineer

Astranis

San Francisco, CA • On-site

Full-time

Re-posted 7 days ago

Job description

Product Security Engineer

As a Product Security Engineer at Astranis, you are a software engineer with a passion for security, responsible for building and securing our web applications and services. Your role will involve embedding security into the software development lifecycle, from design to deployment. While your primary role is to build secure software in Python and modern web stacks, your expertise will be used to identify vulnerabilities, conduct security reviews, and help engineering teams raise the bar for security across the board.

Role

  • Perform security code reviews and penetration testing on our web applications and services.
  • Contribute to security initiatives and serve as a security champion within software development teams.
  • Provide guidance and support to developers on implementing security measures and secure coding best practices.
  • Collaborate with vendors, partners, and other Astranis software engineers to implement effective remediation strategies.
  • Perform risk assessments to identify and prioritize threats in our applications and infrastructure.
  • Work with development teams during the design phase to build secure systems and ensure our products are implemented to a high security standard.
  • Collaborate with software development teams to design and implement technical solutions that address identified risks.

Requirements

  • 2+ years of experience in software engineering with a focus on security.
  • Strong investigative, analytical problem-solving skills and attention to detail.
  • Experience with secure coding practices for web applications.
  • Software development experience and security expertise in Python and modern web frameworks (e.g., Django, Flask, React).
  • Proven experience in threat modeling and security assessments for web applications.
  • Proficiency in software development, including auditing and writing secure code.
  • Strong knowledge of security best practices, common vulnerabilities, and frameworks.
  • Strong communication skills, both written and spoken.
  • Ability to work collaboratively within a team environment.

Apply