Product Security Engineer
Listed on 2026-01-12
-
IT/Tech
Cybersecurity, Systems Engineer
We are looking for a Contract Product Security Engineer to support vulnerability management initiatives within a product security organization. This role is ideal for a security professional who enjoys hands‑on analysis, structured problem‑solving, and improving security processes through automation and collaboration. You will work closely with engineering and security teams to help identify, assess, and prioritize security risks across software components.
The focus of this project is vulnerability management through Software Bill of Materials (SBOM) analysis. The engineer will review and triage vulnerabilities identified by SBOM scanning tools, assess risk and severity, and support remediation efforts in partnership with cross‑functional teams. The role also includes enhancing vulnerability management workflows through scripting and automation, as well as maintaining clear documentation to ensure traceability and compliance within a structured development environment.
What we offer you in USA- We honor the contract terms you prefer.
- 20 paid vacation days per year
- 40 working hours per week
- Medical, Dental, Vision Insurance Plan for you and your Family
- 100% On‑Site position in Newton
- Review, analyze, and triage vulnerabilities from SBOM scanning tools
- Assess severity and support risk‑based prioritization of remediation
- Collaborate with engineering, security, and product teams to drive resolution
- Track vulnerability status for timely closure
- Develop or use scripts/automation to improve vulnerability management
- Maintain clear documentation of findings and actions
- Experience in product security
- Proficiency in Python or other scripting languages
- Strong analytical skills and attention to detail
- Effective collaboration with cross‑functional teams
- Experience with vulnerability management programs
- Exposure to regulated industries
- Familiarity with SBOM management tools (e.g., Dependency Track)
Mid-Senior level
Employment typeFull-time
Job functionInformation Technology
IndustriesIT Services and IT Consulting and Hospitals and Health Care
#J-18808-Ljbffr(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).