Sr. Product Security Engineer

Onwards Together!

Illumio is the leader in ransomware and breach containment, redefining how organizations contain cyberattacks and enable operational resilience.

Powered by the Illumio AI Security Graph, our breach containment platform identifies and contains threats across hybrid multi-cloud environments – stopping the spread of attacks before they become disasters.

Recognized as a Leader in the Forrester Wave™ for Microsegmentation, Illumio enables Zero Trust, strengthening cyber resilience for the infrastructure, systems, and organizations that keep the world running.

Our Engineering team is shaping the future of cybersecurity. We thrive on visionary leadership, autonomy, and ownership, fostering a culture of innovation that propels us forward in the ever-evolving cybersecurity landscape.

As a Senior Product Security Engineer
, you will play a critical role in strengthening the security posture of our products across their entire lifecycle. You will partner closely with Engineering, Product Management, and cross‑functional stakeholders to design secure architectures, evaluate complex systems, perform hands‑on security testing, and build automation that scales security across the organization.

This role requires a strong technical foundation, excellent written and verbal communication skills, and the ability to influence engineering teams to adopt secure‑by‑design principles. You will work independently with minimal oversight, exercising sound judgment to solve problems of diverse scope. You will also drive long‑term security maturity by leading multi‑year security initiatives that measurably improve our security posture.

Security Architecture & Design

• Lead security architecture and design reviews for prototypes, components, and new product features in distributed cloud environments.
• Develop and maintain threat models to proactively identify threats, misuses, and residual risks.
• Provide security consulting for emerging technologies
  , such as AI/ML, defining security requirements and design guardrails.
• Author and maintain product security policies, standards, and architectural guidance
  .

Security Program Leadership

• Lead multi-year product security programs
  , driving roadmap planning, execution, cross‑functional alignment, and measurable security improvements.
• Develop scalable security strategies that align with engineering velocity, product roadmaps, and business priorities.
• Influence teams across organizations to adopt secure design and secure development practices.

Hands-On Security Testing

• Perform manual and automated security testing to validate real-world exploitability of vulnerabilities.
• Conduct manual secure code reviews with a focus on security and privacy risks.
• Execute DAST
  , API security testing
  , and container security scanning
  .
• Validate reported vulnerabilities and support customer security responses
  .

Vulnerability Management

• Drive end-to-end vulnerability management
  , from identification to remediation across code, containers, infrastructure, and cloud.
• Utilize full‑stack scanning tools (SAST, SCA, secrets scanning, container scanning) to uncover vulnerabilities early.
• Partner with engineering teams to prioritize and remediate vulnerabilities based on risk and product impact.
• Support product security incident responses
  , including triage, root‑cause analysis, and remediation guidance.
• Enable Trust office to create and share customer vulnerability response.

Security Automation & Tooling

• Build, enhance, and maintain security automation for scalable vulnerability detection, triage, and reporting.
• Promote the adoption of golden secure images
  , secure‑by‑default tooling, and supply chain security improvements.
• Improve open‑source resiliency through integrity checks, dependency monitoring, and automated safeguards.
• Enable developer self‑service through internal security tooling and guidance frameworks
  .

Security Enablement & Knowledge Development

• Deliver technical security training for engineering teams, including secure coding, secure design, and modern threat awareness.
• Build and maintain a comprehensive security knowledge base
  ,…