Product Security Lead

Position: Product Security Lead
Location: REMOTE
Duration: Long Term Contract
 

Experience:
10+ Years in Information Security with strong expertise in Product Security, DevSecOps, Security Operations (SecOps), and SOC Operations.
 
Role Summary:
Candidate will possess deep expertise in secure software development, application security, cloud security, DevSecOps automation, threat modeling, vulnerability management, incident response, and SOC operations.
This role will work closely with Engineering, Product Management, DevOps, Infrastructure, and Security teams to build secure products and establish a mature security posture across the organization.
 
Key Responsibilities:
 
Product Security
Define and implement product security strategy and roadmap.
Conduct security architecture reviews and threat modeling exercises.
Perform secure design reviews for applications, APIs, microservices, and cloud-native products.
Establish and enforce secure SDLC (SSDLC) practices.
Drive application security assessments including:
SAST
DAST
IAST
Software Composition Analysis (SCA)
API Security Testing
Penetration Testing
Review and remediate findings from security assessments.
Establish product security standards aligned with industry frameworks.
DevSecOps
Integrate security controls into CI/CD pipelines.
Automate security testing and compliance checks.
Implement security gates and policy enforcement within development workflows.
Support container and Kubernetes security initiatives.
Secure cloud deployments across AWS, Azure, and GCP.
Define Infrastructure-as-Code (IaC) security controls.
Drive secrets management and secure configuration practices.
 
Security Operations (SecOps)
Lead vulnerability management programs.
Develop risk-based remediation strategies.
Manage security monitoring and incident response activities.
Collaborate with infrastructure and engineering teams for security hardening.
Lead root cause analysis and post-incident reviews.
Maintain security metrics and reporting dashboards.
SOC
Oversee SOC monitoring and alert triage processes.
Develop and optimize SIEM detection use cases.
Lead threat hunting initiatives.
Manage incident response lifecycle:
Detection
Analysis
Containment
Eradication
Recovery
Drive EDR/XDR implementation and enhancement activities.
Improve SOC maturity through automation and process optimization.
 
Qualifications Required:
Bachelor's degree in Computer Science, Information Security, or related field.
10+ years of Cybersecurity experience.
5+ years in Product Security or Application Security leadership roles.
Experience managing security teams and cross-functional stakeholders.
Hands-on experience with cloud-native and SaaS environments.
Preferred Certifications
CISSP
CSSLP
CCSP
AWS Security Specialty
Azure Security Engineer Associate