> Markdown version of [/jobs/ext/2407565-software-product-security-engineer](https://www.wearedevelopers.com/jobs/ext/2407565-software-product-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Software Product Security Engineer - **Company:** HTC Global Services, Inc. - **Location:** United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Java (Programming Language), JavaScript (Programming Language), Spring Security, Amazon Web Services, Apache Tomcat, Applications Architecture, Software System Penetration Testing, Microsoft Azure, Burp Suite, Cloud Computing, Cloud Computing Security, Configuration Management, Cyber Security, Data Integrity, Linux, DevOps, Disaster Recovery, Java Platform Enterprise Edition (J2EE), Identity and Access Management, Information Systems Security Architecture Professional, JSON, JQuery, Python (Programming Language), Network Security, Network Protocols, Salesforce.Com, Secure Coding, Microsoft SharePoint, Software Engineering, TCP/IP, Web Applications, Pega, Data Logging, Scripting, Google Cloud, ReactJS, Spring-boot, Software Security, Technical Debt, Web Technologies, Dynatrace, Static Application Security Testing, Programming Languages, Dynamic Application Security Testing - **Published:** August 19, 2026 - **Apply:** https://www.dice.com/job-detail/c0dbae83-6874-4552-9dd2-7b818c5b966d ## About the Role The ideal candidate understands the developer perspective while bringing a strong cybersecurity and risk-management mindset. This role requires the ability to work through technical and business considerations and help development and business teams make appropriate security decisions., * Bachelor's degree. * 6+ years of experience in IT. * 4+ years of development experience. * Practical experience in two coding languages or advanced practical experience in one coding language. * Experience with software development and the Software Development Lifecycle. * Experience with cybersecurity and web applications/web technologies. * Experience with scripting and troubleshooting/problem solving. * Experience with TCP/IP and network protocols and standards. * Experience with data integrity and data/analytics dashboards. * Experience with application development and software development. * Knowledge of cybersecurity, information security, and network security. * Knowledge of IAM, JSON, Python, Java, JavaScript, or other listed development technologies is applicable based on experience. * Strong analytical and problem-solving skills., * Master's degree. * Certifications such as CISSP, CISA, or CISM. * Experience with cloud computing and cloud infrastructure. * Experience with Google Cloud Platform. * Experience with risk management, risk assessment, and business risk management. * Experience with solution/application architecture. * Experience with penetration testing and tools such as Burp Suite. * Experience with Spring Security, Spring Boot, J2EE, Apache Tomcat, React, JQuery, Salesforce, Pega, Dynatrace, or SharePoint. * Knowledge of ISO 27001. * Experience with disaster recovery, change control, configuration management, and tooling. * Experience with Linux, network security, and application design. ## Description We are seeking a Software Product Security Engineer to work closely with development and security teams to identify, prioritize, and remediate software security risks. This role will help translate security risks into practical actions while supporting secure architecture, application security, cloud security, software development, and cybersecurity compliance activities., * Guide development teams in triaging and remediating findings from SAST, DAST, SCA, and bug bounty/vulnerability reports. * Serve as a liaison between engineering and security stakeholders, translating security risks into practical and prioritized actions. * Consult on secure architecture, API security, IAM, logging, and secure coding practices across Azure, Google Cloud Platform, and AWS cloud platforms. * Integrate and automate security testing within CI/CD pipelines in collaboration with platform and DevOps teams. * Help development teams manage technical debt, upgrade paths, software supply chain risks, and SBOM-related risks. * Communicate complex technical risks clearly to engineering and business stakeholders. * Support cybersecurity compliance activities. * Work with development and business teams to evaluate technical and security considerations and arrive at appropriate security decisions. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure) - [Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?](https://www.wearedevelopers.com/videos/712-unleashing-the-power-of-developers-why-cybersecurity-is-the-missing-piece) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Best Countries for Software Engineers](https://www.wearedevelopers.com/magazine/267-best-countries-for-software-engineers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)