Senior Product Security Engineer

Details

Collibra is seeking a Senior Product Security Engineer to identify vulnerabilities and provide expert remediation consulting for global product development teams. The role provides technical leadership and oversight to help deliver secure, resilient products and services. You will act as an application security evangelist, partner with engineers to accelerate secure time-to-value, and leverage AI and MCP to create context-aware security automation.

Responsibilities

• Perform application penetration testing across web applications, APIs, and thick clients.
• Perform internal and external network penetration testing.
• Apply cloud-service penetration-testing tradecraft and methodologies across AWS, Azure, and GCP.
• Conduct threat modeling and source-code reviews.
• Ensure quality reports and services are delivered efficiently and on time.
• Collaborate with cross-functional teams to integrate security best practices into the development process.
• Build relationships with engineering teams to enable remediation of discovered vulnerabilities.
• Continue developing professional skills through relevant industry certifications and training.
• Assist with triaging code-security findings from SAST, SCA, IAST, and DAST tools when necessary.
• Leverage AI and MCP to create intelligent, context-aware security guidance and automation.
• Triage security incidents when needed.
• Mentor junior teammates and help mature security practices.

Requirements

• 5+ years of relevant penetration testing, product security, and application security experience.
• 2+ years securing Java, Python, and/or JavaScript web applications.
• Experience with advanced security tools and techniques for simulating real-world attacks.
• Familiarity with OSSTMM, OWASP, SAMM, NIST Special Publications, and PTES.
• Experience testing against compliance frameworks such as PCI, FISMA, HIPAA, FedRAMP, or HITRUST.
• Strong working knowledge of at least two programming or scripting languages.
• Familiarity with best practices for securing SDLC and DevOps processes.
• Experience with AI security tooling and context-aware SSDLC automation.
• Understanding of AI privacy and governance in developer workflows.
• Experience using and building collaborative agentic AI systems.
• Demonstrated proficiency using AI tools such as Claude, Gemini, ChatGPT, and Copilot to solve business challenges, drive measurable outcomes, or streamline workflows.
• Bachelor's degree or equivalent certification and experience.
• Strong verbal and written communication skills, including the ability to produce assessment reports, presentations, and operating procedures.
• This position is not eligible for visa sponsorship.

Preferred Experience

• Relevant security certifications such as OSCP, OSWE, or CRTP.
• Red-team or purple-team operations.
• Working knowledge of Python, Java, and/or JavaScript software development languages.
• Experience performing security assessments against containerized cloud environments.
• Familiarity with AI standards and regulations, including the EU AI Act, SAIF, and ISO 42001.

Measures of Success

• Within the first month, build foundational knowledge of Collibra's processes, tools, and SDLC, and design and implement repeatable penetration-testing methodologies tailored to the environment.
• Within the first three months, independently plan and execute penetration-testing engagements and partner with development teams to understand, prioritize, and remediate identified security issues.
• Within the first six months, partner with the leader to develop a security roadmap for comprehensive, proactive assessments across Collibra, incorporating threat intelligence to anticipate emerging threats and identify potential security gaps.

Benefits

The compensation package includes bonus potential, equity for eligible roles, a Flex Fund monthly stipend, pension/401k plans, health coverage, and time off. Collibra also provides flexible benefits offerings and supports diversity, equity, and inclusion.