Staff Product Security Engineer
About the role
Overview
Key Responsibilities
- Partner with Engineering teams throughout the software development lifecycle to identify and mitigate security risks, and implement secure deployment practices
- Support threat modeling activities and help engineering teams implement appropriate security controls
- Define and promote secure coding standards, security policies, best practices, and secure-by-design principles
- Participate in the Cyber organization's efforts to leverage AI across the team, as well as the use of AI in our SSDLC
- Partner with Engineering on improving security testing programs
- Coordinate internal and external application and penetration testing initiatives
- Validate vulnerability findings and prioritize remediation based on risk
- Perform root cause analysis and recommend long-term security improvements
- Collaborate with the Security Operations team on security monitoring and detection capabilities for applications and services
- Triage, coordinate, and oversee remediation for security researcher disclosures via our bug bounty program
- Develop security training, guidance, and technical documentation
- Interact with other organizations at SailPoint as a consultant on security-related matters
Required Qualifications
Successful candidate will meet most, if not all of the following requirements:
- 4-5 years of experience in product security, application security, software engineering, or a related field
- Experience with security testing tools such as: SAST, SCA, DAST, Container security scanners
- Experience with CI/CD security controls and DevSecOps practices
- Familiarity with one or more programming languages such as Python, Go, Java, JavaScript/TypeScript, Ruby
- Demonstrated ability to effectively use AI-powered tools and automation to enhance security engineering productivity, research, analysis, and remediation efforts
- Knowledge of emerging AI security risks and best practices for securing AI-enabled applications, services, and development workflows
- Deep expertise in threat modeling, secure architecture design, and vulnerability management
- Experience influencing engineering organizations and driving security initiatives across multiple teams
- Knowledge of artificial intelligence software security frameworks is strongly preferred, including OWASP AI Security and Privacy Guide, NIST AI Risk Management Framework, Cybersecurity AI (CAI), Open SSF AI/ML Security Framework.
Core Competencies
The successful candidate will:
- Be a highly active observer of industry security trends and threats, remaining up to date on current cyber issues
- Have a continuous learning mindset and passion for security
- Have strong analytical and problem-solving skills
- Be flexible, with the ability to balance security vs the needs of the business
- Have excellent written and oral communications skills with demonstrated commitment to producing high quality documentation
- Be able to translate technical risks into business impact
- Be collaborative and able to foster relationships with teams we partner with
First 90 Days: Discovery, Strategic Alignment, and Partnership
Strategic Alignment & Planning Integration
SDLC Optimization Assessment
Asset & Dependency Inventory
First 6 Months: Advanced Tooling, Training, and Scalable Frameworks
Modernizing Tool Stack & AI Integration
Optimized Remediation & Board Metrics
Security Champions & Developer Empowerment
First 12 Months: Systemic Security Advancements and "Paved Roads"
Systemic Architecture Enhancements
Standardizing "Paved Road" Configurations
Program Scaling & Mentorship
Maintain and scale updated product architecture documentation while continuously elevating team capabilities, autonomy, and cross-functional alignment through active, hands-on mentorship.
Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint.
As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint's differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US-based employees, will be in this range from (min-max, USD): $145,300 - $244,850.00 Base salaries for employees based in other locations are competitive for the employee's home location.
Benefits Overview
- Health and wellness coverage: Medical, dental, and vision insurance
- Disability coverage: Short-term and long-term disability
- Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)
- Additional life coverage options: Supplemental life insurance for employees, spouses, and children
- Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account
- Financial security: 401(k) Savings and Investment Plan with company matching
- Time off benefits: Flexible vacation policy
- Holidays: 8 paid holidays annually
- Sick leave
- Parental support: Paid parental leave
- Employee Assistance Program (EAP) and Care Counselors
- Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options
- Health Savings Account (HSA) with employer contribution
SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.
Alternative methods of applying for employment are available to individuals unable to submit an application through this site because of a disability. Contact applicationassistance@sailpoint.com or mail to 11120 Four Points Dr, Suite 100, Austin, TX 78726, to discuss reasonable accommodations. NOTE: Any unsolicited resumes sent by candidates or agencies to this email will not be considered for current openings at SailPoint.
Not included in the source posting: about the role, benefits.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.