Senior Product Security Engineer

Navy Federal Credit Union

Senior Product Security Engineer responsible for embedding security in product development at Navy Federal. Collaborating on cloud infrastructure security and managing vulnerabilities within cloud assets.

Posted 6/23/2026full-timeVienna • Florida, Virginia • 🇺🇸 United StatesSenior💰 $131,700 - $206,450 per yearWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityJavaMicroservices.NETPython

About the role

Key responsibilities & impact

Deliver security testing, continuous threat discovery and exposure management of Navy Federal cloud workloads.
Embed security seamlessly into the product development lifecycle for cloud applications and environments.
Serve as a technical interface and subject matter expert working with development teams on securing cloud infrastructure and workloads.
Design, implement, and operationalize security capabilities.
Support the implementation of continuous security monitoring practices, threat and vulnerability prevention, detection, and response capabilities on cloud assets.
Work independently under limited supervision and/or in a team environment.

Requirements

What you’ll need

Bachelor’s Degree in Information Technology or the equivalent combination of education, training or experience
6 years or more experience in the field of cybersecurity and/or application security
Experience implementing cloud security posture management, workload protection, and cloudnative application protection platform tools, and SaaS security posture management (e.g. Defender for Cloud, Obsidian Security, Adaptive Shield, AppOmni, Prisma Cloud, Orca Security, Wiz.io)
Experience with cloud security analysis and design techniques
Experience with cloud security practices and procedures, including risk assessment, authentication technologies, security monitoring, runtime defenses, and security attack patterns and practices
Experience evaluating and deploying AI security tooling
Advanced knowledge in security best practices, principles, and common security frameworks such as OWASP, NIST and ISO
Experience building secure software based on frameworks such OWASP ASVS, BSIMM, or NIST SSDF
Experience in software development including Java, Python, .NET, and scripting languages
Advanced knowledge of secure architecture and design patterns for Web, Mobile, Microservices, and AI design patterns
Advanced knowledge of current and emerging threats and techniques for exploiting security vulnerabilities
Working knowledge of AI/ML security frameworks and standards including OWASP LLM top 10, OWASP ML top 10, MITRE ATLAS, and NIST AI RMF.
Experience with methodologies and security testing tools for threat analysis of complex applications and services including threat modeling, software fuzzing, static and dynamic analysis and penetration testing.
Advanced organizational, planning and time management skills
Advanced communication, presentation and analytical skills

Benefits

Comp & perks

Health insurance
401(k) matching
Flexible work hours
Paid time off
Remote work options

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cloud security posture managementworkload protectioncloud-native application protectionSaaS security posture managementsecurity monitoringrisk assessmentauthentication technologiessecure software developmentJavaPython

Soft Skills

organizational skillsplanning skillstime management skillscommunication skillspresentation skillsanalytical skills