Staff Product Security EngineerFull-timeEmployment Type: Regular (PERM)Remote Work Available: NoJob DescriptionWhy A365 Software Engineering?Build the cloud platform that’s transforming electronics design. Altium 365 for cloud lets design engineers communicate, collaborate and bring their ideas to market more efficiently than any platform in the industry.We are looking for a Senior Product Security Engineer to extend our Product Security capability with a strong focus on continuous vulnerability discovery and prevention.This role is responsible for:Building and executing security regression testingDriving threat modeling across existing and new functionalityConducting targeted offensive security activities (Red Team–style testing)Identifying real vulnerabilities based on a deep understanding of our platform and the OWASP Top 10 Web Application Security RisksThe goal is simple: ensure that both existing functionality and new changes remain secure over time, and that real vulnerabilities are discovered before customers do.Key ResponsibilitiesSecurity Regression TestingDesign and maintain security regression test suites covering critical application flowsEnsure vulnerabilities, once fixed, are permanently prevented from recurringIntegrate security regression into CI/CD pipelinesDefine coverage targets for security-critical areas (auth, access control, APIs, data flows)Threat ModelingLead structured threat modeling sessions for:Existing system componentsNew features and architectural changesIdentify attack surfaces, abuse cases, and trust boundariesTranslate threats into:Test casesSecurity requirementsMitigation plansEnsure threat modeling becomes a continuous lifecycle activityOffensive Security / Red Team ActivitiesPerform manual and automated security testing simulating real attacker behaviorFocus on high-impact vulnerabilities, not theoretical findingsValidate exploitability and business impactPartner with engineering teams to:Reproduce issuesPrioritize fixesValidate remediationOWASP Top 10–Driven Vulnerability DiscoveryContinuously assess the platform against OWASP Top 10 categoriesUse deep product knowledge to find non-obvious, context-specific vulnerabilitiesGo beyond tooling (DAST/SAST) to uncover logic flaws and abuse pathsSecurity Assurance for Product ChangesReview new features and changes for security risksEnsure all changes are:Threat-modeledCovered by regression testsAct as a security gatekeeper without becoming a bottleneck:Enable teams with guidance and toolingAvoid heavy process overheadCollaboration & EnablementWork closely with:Engineering teamsArchitectureSRE / Platform teamsContribute to secure-by-design practicesSupport developers in understanding and fixing vulnerabilitiesHelp scale security through:Reusable patternsAutomationSecurity guidanceQualificationsRequired Qualifications5+ years in Application / Product SecurityBachelor's Degree or equivalent of 12 years of work experienceStrong hands-on experience in:Web application security testingAPI securityThreat modeling methodologiesDeep understanding of OWASP Top 10Experience with:Manual penetration testingSecurity regression testingCI/CD security integrationAbility to identify business logic vulnerabilitiesStrong understanding of:Authentication, authorization, and session managementMulti-tenant architecturesCloud-native systemsPreferred QualificationsExperience in SaaS / multi-tenant platformsFamiliarity with:Bug bounty programsRed teamingSecurity automation frameworksKnowledge of:AWSIdentity systems and federation (SSO, MFA)Background in software engineering (ability to read/write code)Additional InformationAltium Limited, a part of the Renesas Group and headquartered in San Diego, California, is a global software company accelerating the pace of electronics innovation. We are redefining electronic product creation in a software-defined world with our industry-first cloud-based platform that unites every stakeholder and phase of electronics development.From startups to world’s technology giants, our digital platforms give more power to PCB designers, supply chain, and manufacturing, letting them collaborate as never before. At Altium, our teams are empowered to innovate, collaborate globally, and help create the future of electronics development.We believe in rewarding our employees with a competitive benefits package alongside their salary. More information will be provided during the hiring process.By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy applyI'm interestedI'm interestedPrivacy Notice
