Staff Product Security Engineer

Staff Product Security Engineer Job Description

Why A365 Software Engineering?

Build the cloud platform that's transforming electronics design. Altium 365 for cloud lets design engineers communicate, collaborate and bring their ideas to market more efficiently than any platform in the industry. We are looking for a Senior Product Security Engineer to extend our Product Security capability with a strong focus on continuous vulnerability discovery and prevention. The goal is simple: ensure that both existing functionality and new changes remain secure over time, and that real vulnerabilities are discovered before customers do.

Key Responsibilities

• Security Regression Testing
• Design and maintain security regression test suites covering critical application flows
• Ensure vulnerabilities, once fixed, are permanently prevented from recurring
• Integrate security regression into CI/CD pipelines
• Define coverage targets for security-critical areas (auth, access control, APIs, data flows)

Threat Modeling

Lead structured threat modeling sessions for existing system components and new features and architectural changes

Identify attack surfaces, abuse cases, and trust boundaries

Translate threats into test cases, security requirements, mitigation plans

Ensure threat modeling becomes a continuous lifecycle activity

Offensive Security / Red Team Activities

Perform manual and automated security testing simulating real attacker behavior

Focus on high-impact vulnerabilities, not theoretical findings

Validate exploitability and business impact

Partner with engineering teams to: reproduce issues, prioritize fixes, validate remediation

OWASP Top 10-Driven Vulnerability Discovery

Continuously assess the platform against OWASP Top 10 categories

Use deep product knowledge to find non-obvious, context-specific vulnerabilities

Go beyond tooling (DAST/SAST) to uncover logic flaws and abuse paths

Security Assurance for Product Changes

Review new features and changes for security risks

Ensure all changes are threat-modeled and covered by regression tests

Act as a security gatekeeper without becoming a bottleneck: enable teams with guidance and tooling, avoid heavy process overhead

Collaboration & Enablement

Work closely with engineering teams, architecture, SRE / Platform teams

Contribute to secure-by-design practices

Support developers in understanding and fixing vulnerabilities

Help scale security through reusable patterns, automation, security guidance

Required Qualifications

• 5+ years in Application / Product Security
• Bachelor's Degree or equivalent of 12 years of work experience
• Strong hands‑on experience in:
• Web application security testing
• API security
• Threat modeling methodologies
• Deep understanding of OWASP Top 10
• Experience with:
• Manual penetration testing
• Security regression testing
• CI/CD security integration
• Ability to identify business logic vulnerabilities
• Strong understanding of:
• Authentication, authorization, and session management
• Multi-tenant architectures
• Cloud-native systems

Preferred Qualifications

• Experience in SaaS / multi-tenant platforms
• Familiarity with:
• Bug bounty programs
• Red teaming
• Security automation frameworks
• Knowledge of:
• AWS
• Identity systems and federation (SSO, MFA)
• Background in software engineering (ability to read/write code)

Altium Limited, a part of the Renesas Group and headquartered in San Diego, California, is a global software company accelerating the pace of electronics innovation. We are redefining electronic product creation in a software-defined world with our industry‑first cloud‑based platform that unites every stakeholder and phase of electronics development. From startups to world’s technology giants, our digital platforms give more power to PCB designers, supply chain, and manufacturing, letting them collaborate as never before. At Altium, our teams are empowered to innovate, collaborate globally, and help create the future of electronics development. We believe in rewarding our employees with a competitive benefits package alongside their salary. Mandatory Self Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mand

#J-18808-Ljbffr