Senior Director, Product Security and Resilience
Dun & Bradstreet
CloudSDLC
Security Engineer, Application Security
Dropbox
full-time
Posted on:
Origin: • 🇵🇱 Poland
Visit company websiteSalary
💰 PLN 212,500 - PLN 287,500 per year
Job Level
Mid-LevelSenior
Tech Stack
CloudMicroservicesSDLC
About the role
- Build and maintain security tools, automation, and libraries to enable secure-by-default development across engineering teams.
- Design and implement custom security rules (e.g., Semgrep, CodeQL) to detect and prevent common and emerging vulnerability patterns.
- Act as a subject matter expert on application security across web, mobile, and desktop environments.
- Conduct security consultations and threat modeling sessions, and clearly communicate risk and mitigation strategies to technical and non-technical stakeholders.
- Improve and scale the Secure Development Lifecycle (SDLC) by integrating tools, checks, and processes into engineering workflows.
- Perform targeted code and design reviews, and develop follow-up tooling or controls to prevent regressions.
- Collaborate cross-functionally with engineering, product, GRC, and AI/ML teams to proactively address security risks, especially in fast-moving and emerging tech areas.
- On-call work may be necessary occasionally to help address bugs, outages, or other operational issues, with the goal of maintaining a stable and high-quality experience for our customers.
Requirements
- 3+ years of experience in application security or security engineering roles.
- Hands-on experience building or using security automation tools to improve developer workflows and product security.
- Demonstrated ability to work across the SDLC, including supporting and interpreting findings from penetration tests and bug bounty reports.
- Familiarity with modern tech stacks, including microservices, CI/CD pipelines, and cloud-native environments.
- Solid understanding of common vulnerability classes (e.g., injection, XSS, authN/authZ issues) and practical mitigation strategies.
- Comfortable working in cross-functional environments and supporting multiple product and engineering teamssimultaneously.
- Experience participating in or supporting incident response or security on-call rotations is a plus
Similar jobs on JobTailor
Senior Director, Product Security and Resilience (R-18339)
Dun & Bradstreet
CloudSDLC
Senior Cloud Security Engineer
TherapyNotes, LLC
AWSAzureCloudCyber SecurityFirewallsLinuxSDLC
Senior Analyst, Tech Risk
Coinbase
CloudCyber SecuritySQL
Director, Product Security
Unqork
AWSAzureCloudGoogle Cloud PlatformMicroservicesSDLC