We are seeking a highly skilled and hands-on Staff Engineer, Product Security to advance the security of our products and applications. The ideal candidate will have deep technical expertise in securing complex web applications and services. This role requires an individual contributor who can lead by technical example, engaging directly with teams in design reviews, threat modeling, code reviews, and automation of security processes.

How will you make an impact?

• Shape product security strategy and establish best practices
• Drive code reviews, penetration testing, and vulnerability assessments
• Collaborate with development teams to implement security fixes and preventive measures
• Develop and maintain threat models for critical applications and services
• Embed security into the software development lifecycle and CI/CD pipelines
• Support incident response teams in addressing security vulnerabilities
• Work across teams to ensure security considerations are part of development workflows
• Build and maintain security automation frameworks
• Support compliance with GDPR, ISO 27001, DORA, and MiCA

How will you be successful?

• Bring 10+ years of experience in cybersecurity, particularly in application security, preferably gained within the financial/tech/trading domains
• Apply in-depth knowledge of web application security and secure coding practices
• Use tools like static/dynamic analysis, SAST, DAST, and RASP
• Demonstrate proficiency in programming languages like Python, Kotlin, TypeScript, and Go
• Understand security frameworks like OWASP, NIST, and regulations like GDPR and ISO 27001
• Secure cloud environments, especially AWS or similar platforms
• Solve problems by building scalable and automated security solutions
• Communicate effectively with engineering and product teams at various technical levels