Product Security Engineer (Psirt)

Задачи • Define, improve, formalize, and implement the Product Security Incident Response Program across all products and business units • Manage day-to-day bug bounty program operations, including researcher engagement, vulnerability triage and validation, severity assessment, remediation coordination, reward recommendations, and process improvements • Oversee the vulnerability lifecycle from discovery to resolution, including triage, impact assessment, engineering coordination, fix validation, and timely stakeholder communication • Lead the security disclosure program from triage through disclosure • Report on program health and activity status • Improve vulnerability and risk workflows, governance, and communication with internal teams • Collaborate with Engineering, IT, Product, Legal, and Security teams on cross-functional initiatives • Mentor junior engineers on incident response procedures, technical investigations, and vulnerability remediation • Partner with leadership to advance proactive threat detection and vulnerability management

Требования • 6+ Years of experience in Information Security, focused on Product Security, Application Security, Vulnerability Management, and Security Operations • Experience conducting comprehensive security code reviews to identify vulnerabilities and code flaws • Experience with Application Security vulnerabilities • Experience with Product Security concepts • Experience in risk management • Experience handling incident response…