Software Product Security Engineer

HTC Global Services, Inc.
United States
17 days ago
Apply on www.dice.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
4 years minimum
Working hours
Regular working hours
Job source

Tech stack

Java (Programming Language) JavaScript (Programming Language) Spring Security Amazon Web Services Apache Tomcat Applications Architecture Software System Penetration Testing Microsoft Azure Burp Suite Cloud Computing Cloud Computing Security Configuration Management
+32 more
Cyber Security Data Integrity Linux DevOps Disaster Recovery Java Platform Enterprise Edition (J2EE) Identity and Access Management Information Systems Security Architecture Professional JSON JQuery Python (Programming Language) Network Security Network Protocols Salesforce.Com Secure Coding Microsoft SharePoint Software Engineering TCP/IP Web Applications Pega Data Logging Scripting Google Cloud ReactJS Spring-boot Software Security Technical Debt Web Technologies Dynatrace Static Application Security Testing Programming Languages Dynamic Application Security Testing

Job description

We are seeking a Software Product Security Engineer to work closely with development and security teams to identify, prioritize, and remediate software security risks. This role will help translate security risks into practical actions while supporting secure architecture, application security, cloud security, software development, and cybersecurity compliance activities., * Guide development teams in triaging and remediating findings from SAST, DAST, SCA, and bug bounty/vulnerability reports.

  • Serve as a liaison between engineering and security stakeholders, translating security risks into practical and prioritized actions.
  • Consult on secure architecture, API security, IAM, logging, and secure coding practices across Azure, Google Cloud Platform, and AWS cloud platforms.
  • Integrate and automate security testing within CI/CD pipelines in collaboration with platform and DevOps teams.
  • Help development teams manage technical debt, upgrade paths, software supply chain risks, and SBOM-related risks.
  • Communicate complex technical risks clearly to engineering and business stakeholders.
  • Support cybersecurity compliance activities.
  • Work with development and business teams to evaluate technical and security considerations and arrive at appropriate security decisions.

Requirements

The ideal candidate understands the developer perspective while bringing a strong cybersecurity and risk-management mindset. This role requires the ability to work through technical and business considerations and help development and business teams make appropriate security decisions., * Bachelor’s degree.

  • 6+ years of experience in IT.
  • 4+ years of development experience.
  • Practical experience in two coding languages or advanced practical experience in one coding language.
  • Experience with software development and the Software Development Lifecycle.
  • Experience with cybersecurity and web applications/web technologies.
  • Experience with scripting and troubleshooting/problem solving.
  • Experience with TCP/IP and network protocols and standards.
  • Experience with data integrity and data/analytics dashboards.
  • Experience with application development and software development.
  • Knowledge of cybersecurity, information security, and network security.
  • Knowledge of IAM, JSON, Python, Java, JavaScript, or other listed development technologies is applicable based on experience.
  • Strong analytical and problem-solving skills., * Master’s degree.
  • Certifications such as CISSP, CISA, or CISM.
  • Experience with cloud computing and cloud infrastructure.
  • Experience with Google Cloud Platform.
  • Experience with risk management, risk assessment, and business risk management.
  • Experience with solution/application architecture.
  • Experience with penetration testing and tools such as Burp Suite.
  • Experience with Spring Security, Spring Boot, J2EE, Apache Tomcat, React, JQuery, Salesforce, Pega, Dynatrace, or SharePoint.
  • Knowledge of ISO 27001.
  • Experience with disaster recovery, change control, configuration management, and tooling.
  • Experience with Linux, network security, and application design.

Benefits & conditions

HTC Global Services wants you to join our team. Come build new things with us and advance your career. At HTC Global, you ll collaborate with experts, work alongside clients, and be part of high-performing teams driving success together. You ll have long-term opportunities to grow your career and develop skills in the latest emerging technologies.

At HTC Global Services, our employees have access to a comprehensive benefits package. Benefits can include Group Health (Medical, Dental, and Vision), Paid Time Off, Paid Holidays, 401(k) matching, Group Life and Disability insurance, Professional Development opportunities, Wellness programs, and a variety of other perks.

Our success as a company is built on inclusion and diversity. HTC Global Services is committed to providing a workplace free from discrimination and harassment, where every employee is treated with dignity and respect. We celebrate differences and believe that diverse cultures, perspectives, and skills drive innovation and success. HTC is an Equal Opportunity Employer and a proud National Minority Supplier. We seek to empower each individual, fostering an environment where everyone feels valued, included, and respected.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

52 sec

Running persistent Linux environments directly on Windows

Ben Breard Ben Breard · World Congress 2025

3:47 min

Exploring JSON, CBOR, and JOSE for data serialization

Aaron Russell · LIVE

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · World Congress 2022

3:55 min

Demonstrating .NET installation on Debian and Azure Linux

Silvano Coriani Silvano Coriani · Europe 2026 Virtual

2:03 min

Distinguishing type definition constructs from data validation routines

Clemens Vasters Clemens Vasters · World Congress 2025

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

Videos

See all

Related articles

See all