Product Security Engineer

Join our team as a Product Security Engineer, where you will be responsible for securing our fleet of autonomous vessels and supporting infrastructure. You will conduct vulnerability assessments, design and maintain network security architecture, secure our AWS cloud infrastructure, and integrate security into our development pipeline. You will also monitor and respond to security incidents, develop security tools and frameworks, and provide support to the DevOps team. This role requires strong networking expertise, experience with security tools, and proficiency in common operating systems and programming languages.

• Conduct vulnerability assessments and penetration testing on applications, systems, and network infrastructure.
• Design, harden, and maintain network security architecture, including segmentation, VPN/mesh networks, and firewalls.
• Integrate and manage SAST and SCA tooling into the development pipeline to catch vulnerabilities and dependency risks pre-deployment.
• Strong communication skills and ability to work collaboratively across teams
• Experience collaborating with other functional teams to define requirements and goals
• Deep understanding of software-security principles and cloud-infrastructure security
• Experience with security tools such as IDS/IPS, firewalls, and vulnerability scanners
• Experience with observability/monitoring platforms (Datadog or equivalent) for security

use cases

• Proficiency in common operating systems (Linux, Windows) and deep familiarity with

networking protocols

• Strong knowledge of security protocols, cryptography, secure coding practices, and

OAuth/auth protocols

• Strong, demonstrable networking security experience — VPNs, routing, and firewalls
• Hands-on experience with SAST/SCA tools (SonarQube or equivalent) and integrating

them into CI/CD (Jenkins or equivalent)

• 3+ years working in Product Security and CI/CD or software development
• Strong hands-on experience with AWS (IAM, VPC, cloud-native security services)
• Excellent problem-solving skills and attention to detail
• Understanding of compliance and security frameworks (e.g., CMMC, CIS Benchmarks)
• Comfortable with a fast-paced development schedule
• Proficiency in programming languages such as Python, Java, C++, or similar
• Bachelor's degree in Computer Science, Cybersecurity, or a related field; Master's degree preferred