Product Security Engineer securing Grid Automation products through SDL, threat modelling, and penetration testing. Managing vulnerabilities and incidents for Grid Automation cybersecurity solutions.
About the role
- Security Engineering Intern securing web apps and APIs at Super.com. Collaborating on DevSecOps tools and infrastructure projects for enhanced security.
Responsibilities
- Participate in securing our product by catching application-level vulnerabilities in our web apps and APIs
- Deploy and maintain DevSecOps tools such as Trivy, Bandit, or GitLeaks as part of our CI/CD pipelines
- Implement least-privileged access policies for our secrets using Hashicorp Vault
- Help investigate automated security alerts
- Implement and maintain audit log pipelines from our internal tools and external vendors
- Work with cutting edge infrastructure tools like AWS, Docker, Kubernetes, Terraform, and Helm
- Implement identified fixes for software vulnerabilities
- Build and integrate security tooling by writing basic Python scripts and applications
Requirements
- You’ve seen how to take advantage of vulnerable web apps and APIs, and you would like to patch them
- You’ve performed testing with some variation of security tooling (whether it be Burp Suite, Fiddler, Wireshark, etc.)
- You have excellent knowledge of how networked services in the cloud work: VPC, IP, TCP, DNS, HTTP, etc.
- You can use critical thinking skills to determine the impact and severity of the identified vulnerability to our organization
Benefits
- Home Office Setup Allowance: $300 one-time
- Friday UberEats Allowance: $25/week
- Learning & Development Allowance: $300/ per term
- Fitness/Wellness Allowance: $120/per term
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Product Security Engineer securing Grid Automation products for GE Vernova’s Grid Automation business. Applying SDL, vulnerability management, threat modeling, penetration testing and IEC 62443 standards.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
Senior Product Security Engineer building AI - driven SDLC security tooling for BeyondTrust’s identity security SaaS. Automating reviews, integrating CI/CD controls, and supporting product incident response.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.
Red Team Security Engineer conducting cloud adversary simulations for Motive’s fleet - management platform. Assessing attack paths, validating detection coverage, and driving remediation with engineering teams.
Staff Product Security Architect securing GitLab’s DevSecOps orchestration platform. Driving architecture, threat modeling, prototypes, and systemic risk reduction across engineering.
Information Security Manager leading enterprise EUC governance technology deployment and product roadmaps at TD, a global financial institution. Driving risk controls, adoption, delivery and assurance across business segments.
Principal Cloud Security Engineer securing Pax8’s cloud marketplace, infrastructure, and AI - enabled platforms. Establishing cloud, Kubernetes, identity, and software - delivery security standards across USA and Canada.