> Markdown version of [/jobs/ext/4020433-lead-product-security-engineer](https://www.wearedevelopers.com/jobs/ext/4020433-lead-product-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Product Security Engineer

- **Company:** Cloud Software Group Holdings, Inc.
- **Location:** Los Angeles, CA, United States
- **Experience:** Expert
- **Salary:** $191,520.0 - $287,280.0
- **Contract:** Permanent contract
- **Skills:** Applications Architecture, Software System Penetration Testing, Unix, C++ (Programming Language), Code Review, Computer Programming, Software Debugging, Linux, Domain Name System (DNS), Fuzz Testing, Make (Software), Open Web Application Security, Cloud Services, Reverse Engineering, Software Engineering, TCP/IP, Software Security, Information Technology, Programming Languages
- **Published:** October 30, 2026
- **Apply:** https://startup.jobs/lead-product-security-engineer-1200-cloud-software-group-ho-10537897

## About the Role

* 9+ years of hands-on experience in product security, with a strong emphasis on C/C++ development and security analysis
 * You have a Full-time degree in Engineering (Preferably Computer Science related)
 * You are an expert in at least one of these areas in security - Unix System, Network, Cryptography
 * Demonstrated hands-on experience in C and C++ programming, with strong low-level Linux systems knowledge.
 * Good knowledge of Networking (TCP/IP) and other protocols like HTTP/S, DNS, et.al.
 * Debugging Skills like GDB, core dump analysis and understanding Makefile concepts.
 * Extensive knowledge of common vulnerabilities - able to explain and remediate the OWASP Top 10 vulnerabilities across multiple programming languages
 * Reverse Engineering (Good to have)
 * Fuzzing using tools such as AFL, Peach (Good to have)
 * Deep understanding of application architecture and design principles
 * Experience in design review and threat modelling activities
 * You are capable of writing exploits for vulnerabilities identified in those respective areas.
 * Have excellent capabilities to identify security vulnerabilities and perform root cause analysis.
 * Good to have certifications such as OSCP, OSCE, GPEN, CRTP etc.

## Description

* You will be responsible for leading and executing the Secure Software Development Lifecycle (SSDLC) for Cloud Software Group On-Prem and Cloud products to ensure that our software meets the customer expectation of security robustness.
 * You will provide guidance to product development teams on design changes as per security requirements.
 * Manual Source Code Review primarily C and C++ programming languages
 * Crash Exploitability Analysis - Analyze Crashes to Find Security Vulnerabilities using tools such as gdb (Good to have)
 * Execute the penetration tests internally to identify security vulnerabilities
 * Identify opportunities to prevent security problems at scale, Develop prototypes to prevent these security problems.