Senior Product Security Engineer @Blockchain

Overview

The role of Senior Product Security Engineer at Blockchain involves operating the Product Security program for internally-developed products across various lines. This senior, hands-on position includes designing and running the secure development lifecycle, leading threat modeling, and ensuring security in product engineering.

Key Responsibilities

• Act as a senior security engineer for different product lines, owning security gates for major feature releases.
• Operate and improve the secure development lifecycle, incorporating SAST/SCA/DAST and other security measures.
• Research and embed AI utilities into the secure development lifecycle.
• Lead threat modeling for sensitive flows and approve security architectures for critical designs.
• Create and maintain Application Security Standards and secure coding baselines.
• Oversee the Bug Bounty program, turning findings into internal security enhancements.
• Perform deep-dive code reviews and mentor engineers on secure coding practices.
• Conduct advanced code audits on Java and Kotlin backend Pull Requests.
• Produce data-driven security debt packs and negotiate remediation with engineering teams.
• Define application runtime signals and collaborate with SecOps on instrumentation.
• Build and maintain testing tools to prevent regressions in critical flows.
• Provide incident response support for product-level issues.
• Define and manage Product Security metrics, translating findings into risk reports.
• Coach junior engineers and assist the Product Security Lead with hiring standards.

Requirements

• 4+ years of security engineering experience, with at least 3 years in application/product security.
• Experience with web, mobile, cloud, infrastructure pentests, and Red Teaming.
• Proven experience with security automation using tools like CodeQL/GHAS, Snyk.
• Expertise in auditing Kotlin/Java, TypeScript/JS, and Python, with knowledge of containerized deployments.
• Strong experience in threat modeling and architecture guidance for financial flows.
• Excellent stakeholder management skills.

Benefits

• Unlimited vacation policy.
• Unlimited books policy for technical resources.
• Apple equipment provided.
• Full-time salary and meaningful equity offerings.
• Mandatory in-office presence four days a week with a remote work policy for 20 days a year.

Location

Role based in Paris with a mandatory in-office presence four days a week and a remote work policy for 20 days per year.

How to Apply

Please visit the company career page to apply for the position.

Deadline

No specific deadline mentioned.