Staff Security Engineer
Job Description
Delinea is seeking an experienced Principal/Staff-level Product Security Engineer to lead the company’s Product Security Program strategy and execution. This role focuses on secure design reviews, threat modeling, security architecture assessments, and maturing an S-SDLC approach while partnering closely with engineering teams to embed security into CI/CD workflows.
Responsibilities
- Provide leadership and serve as a security thought leader across Delinea’s product offerings.
- Assess the current product security program state and partner with the team to define a future state and multi-year roadmaps.
- Set strategic direction and influence security architecture adoption within product strategy and roadmap planning.
- Apply knowledge of current product security best practices and industry trends to advise secure design for Delinea products and services.
- Conduct end-to-end security architecture reviews and leverage AI capabilities to expand team coverage and effectiveness.
- Perform threat modeling, assess and document product risks and application designs.
- Support the expansion and maturation of Delinea’s S-SDLC program.
- Stay current on the threat landscape, technologies, security compliance requirements, standards, and industry trends to advance cybersecurity goals.
- Develop baseline cloud, container, application, and infrastructure security standards and integrate them into CI/CD pipelines.
- Automate operational activities involved in maintaining product and cloud security infrastructure.
- Respond to security incidents and, when appropriate, resolve or escalate them.
- Provide mentorship and guidance to Product Security team members.
- Implement organizational policies and standards for product and cloud security.
- Partner with other teams to integrate cloud security best practices.
- Discuss application and cloud security, participate in security audits, and assist with responding to customer security inquiries.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a similar related field, or equivalent experience.
- Twelve (12) years of professional work experience in Cybersecurity.
- Minimum of seven years in a Product Security role covering Security Architecture, Threat Modeling, Secure Design, AppSec tooling, and related activities.
- Strong familiarity with the current Product Security threat landscape and industry best practices.
- Experience performing threat modeling and product security design reviews, including incorporation into SSDLC processes.
- Experience with Cloud Security and Cryptography.
- Experience with Secure Design reviews and Threat Modeling.
- Experience with SaaS multi-tenant product architecture.
- Experience with REST APIs.
- Experience with Containers such as Docker and Kubernetes (or similar).
- Experience integrating security testing tools into development pipelines.
- Experience with defect tracking tools such as Jira, Bugzilla, or ServiceNow (or similar).
- Experience with source code management tools such as ADO, GitLab, or GitHub (or similar).
- Experience with application security testing tools including SAST, DAST, IAST, SCA (or similar).
- Strong leadership, communication, and interpersonal skills with the ability to influence stakeholders at all organizational levels.
- Strong analytical skills, including prioritization, managing competing demands, and meeting deadlines.
- Strong verbal and written communication skills with the ability to explain technical security topics in plain language.
Technology & Tools
- Cloud Security, Cryptography
- SaaS multi-tenant product architecture
- REST APIs, CI/CD
- S-SDLC, SSDLC
- Docker, Kubernetes
- Jira, Bugzilla, ServiceNow
- ADO, GitLab, GitHub
- SAST, DAST, IAST, SCA
- Azure, AWS
Benefits
- Competitive salaries
- Meaningful bonus program
- Healthcare insurance
- Pension/retirement matching
- Comprehensive life insurance
- Employee assistance program
- Time off plans
- Paid company holidays
- Excellent benefits
Additional “We’d Love to See”
- Experience leveraging AI capabilities to automate and augment Product Security tasks such as Threat Modeling and Secure Design reviews.
- Strong understanding of cybersecurity frameworks, risk management principles, and industry standards (e.g., NIST, ISO 27001, CIS, GDPR).
- Solid understanding of cloud security technologies, including container security, serverless security, network and application security, and access management.
- Software engineering and/or development experience.
- Cybersecurity certifications such as CISSP, CSSLP, CISM (or similar).
- Proficiency with Azure and AWS.
Company Information
Delinea is building solutions to protect human and machine identities. The organization invests in people who are smart, self-motivated, and collaborative, with a focus on innovation and career progression. Core values include Spirited, Trust, Respect, Ownership, Nimble, and Global.
Compensation, Location, and Experience
- Salary range: USD 170,000 - 200,000 per year
- Location: Redwood City, CA (remote)
- Minimum experience: 7 years
- Education: Bachelor’s degree in Computer Science, Information Security, or similar (or equivalent experience)