Product Security Engineer

Datasite and its associated businesses are the global center for facilitating economic value creation for companies across the globe. From data rooms to AI deal sourcing

and more. Here you'll find the finest technological pioneers: Datasite, Blueflame AI, Firmex, Grata, and Sherpany. They all, collectively, define the future for business growth.

Apply for one position or as many as you like. Talent doesn't always just go in one direction or fit in a single box. We're happy to see whatever your superpower is and find the best place for it to flourish.

Get started now, we look forward to meeting you.

Job Description
As a Product Security Engineer, leverage your expertise in identifying and mitigating security vulnerabilities, collaborating with cross-functional teams, and implementing robust security measures. With a strong foundation in web application security, authentication technologies, and development skills, you'll ensure our products remain secure and resilient against emerging threats. If you're passionate about security and thrive in a dynamic environment, this is the perfect opportunity to make a significant impact

Duties And Responsibilities

• Implement and maintain product security capabilities into the Secure SDLC.
• Define baseline requirements and build integrations into the CI/CD to enable detection and prevention of misconfigurations and vulnerabilities.
• Perform code reviews focused on potential security risks and collaborate with engineering to remediate.
• Support the growth of the Product Security program to include establishing security pillars targeting key focus areas within the product lifecycle.
• Develop automation to scale security capabilities integrated into Datasite processes.
• Define security best practices relevant to our technology stack.
• Support security incident response processes for the Security Operations team.

Qualifications
Education

• Required: Bachelor's Degree in Computer Science, Cybersecurity, or similar technical degree.
• Highly Preferred: Certifications relevant to product security or software development. (i.e.. CSSLP, OSWE, CKS)

Experience

• Required: 2+ years in software development or product security
• Strong understanding of core software security principles and OWASP Top 10.
• Experience identifying and mitigating security vulnerabilities.
• Familiarity with application security tools such as web proxies, or fuzzers.
• Proficient in programming languages such as Java, JavaScript, and Python.
• Understanding of cloud principles and experience working with a major cloud provider.
• Familiarity with DevOps practices, CI/CD and containerization.
• Experience with Microservices architecture and MVC design pattern.
• Experience performing code reviews, identifying software bugs or security risks.
• Knowledge of networking principles and web protocols.
• Understanding of Agile methodologies and experience working with Agile teams.
• Experience collaborating as a team player in a cross-functional environment.
• Strong critical thinking and problem-solving skills.

Additional Requirements

• Must be consistently available during core business hours of Monday – Friday, 8:00am - 5:00pm Central, to assist with global coverage.
• This is a hybrid role (100% remote is not available), our employees work on average 2-3 days per week in our Heredia office. Also, we require (1) in-person interview in Costa Rica.

Our company is committed to fostering a diverse and inclusive workforce where all individuals are respected and valued. We are an equal opportunity employer and make all employment decisions without regard to race, color, religion, sex, gender identity, sexual orientation, age, national origin, disability, protected veteran status, or any other protected characteristic. We encourage applications from candidates of all backgrounds and are dedicated to building teams that reflect the diversity of our communities.