This is an onsite role based out of our office in Loveland, Colorado. The Target Pay Range for this position is $141,000 - $176,000 annually. At Antech, pay decisions are determined using factors such as relevant job-related skills, experience, education, training, and budget.Job SummaryThe Sr. Product Security Engineer will be responsible for defining, implementing and enforcing secure coding practices to ensure that software security is embedded early on (shifting left) throughout product development lifecycle. To achieve this, the candidate will be collaborating with the Software Engineering Development Teams and the Cybersecurity team in leading and enhancing the design and implementation of information security requirements, including secure coding standards, language-specific secure coding guidelines, as well as secure SDLC methodologies. This role requires strong expertise in secure coding standards, vulnerability management, and collaboration with development teams to build secure applications.
Key Responsibilities- Develop, maintain, and implement secure coding standards based on industry best practices such as NIST 800-53, OWASP, CWE, CERT, and ISO.
- Develop, implement, and maintain coding standards based on language-specific secure coding guidelines for languages such as JavaScript, .NET, TypeScript, and mobile OS-based languages, as well as Cloud-related security best practices.
- Lead the design, development, and maintenance of secure services and APIs using modern frameworks. Act as the subject matter expert for secure coding practices.
- Integrate security principles into the Software Development Lifecycle, ensuring compliance with security and privacy policies and standards.
- Conduct secure code reviews (manual and automated) and analysis (SAST, DAST, SCA) to identify and remediate vulnerabilities directly in the codebase.
- Work closely with software developers and DevOps teams to remediate vulnerabilities and enhance secure coding practices.
- Provide training, mentorship, and technical guidance to developers and junior security engineers on secure coding techniques and threat mitigation strategies.
- Establish and manage automated security testing within CI/CD pipelines.
- Lead risk assessments and threat modeling exercises to provide vulnerability remediation guidance to product development teams globally.
- Ensure architecture aligns with industry standards for security, including encryption, disaster recovery, authentication, and patch management.
- Stay up to date on emerging security threats, vulnerabilities, and mitigation techniques.
Qualifications & Experience- Bachelor's or Master's degree in Cybersecurity, Information Technology, Computer Science, Engineering or related field.
- 7+ years of experience in secure software development, application security or DevSecOps.
- Hand-on experience static, dynamic and Software Composition Analysis (SAST/DAST/SCA) tools.
- Experience with security testing tools like SonarQube, Checkmarx, Fortify, Veracode, Burp Suite, or similar tools.
- Experience in a laboratory setting, veterinary clinics, healthcare or related systems.
- Experience communicating complex security concepts effectively (technical, non-technical and executive level audiences)
- Proven hands-on experience developing and fixing code in languages like C#, .NET, JavaScript, or TypeScript.
- Experience and knowledge working with encryption algorithms and a Public-Key Infrastructure (PKI) solutions.
- Knowledge of cloud security best practices for AWS, GCP and Azure.
- Experience with container security (Docker, Kubernetes) a plus.
- Relevant certifications such as CISSP, CSSLP, CEH, OSCP, GIAC GWAPT are highly preferred.
- Microsoft Azure certifications including Microsoft Certified-AZ-500, AZ-505, AZ-400, SC-900 are a plus.
- Experience working in a regulated (FDA, MDR or Cyber Resilience Act- EU) environment with medical instrumentation is a plus.
- Strong knowledge of secure coding standards (e.g. OWASP, CERT, CWE, SANS Top 25, etc.)
- Proficiency in programming languages and related tools such as C#, .NET, PowerShell, TypeScript, as well as Azure-related security best-practices for Azure DevOps, Azure Security Center, Key Vault, Azure Policy, Azure AD and role-based access controls.
- Understanding of Zero Trust, Cloud-based and hybrid architectures.
- Hands -on knowledge of threat modeling methodologies (STRIDE, DREAD, etc.)
- Strong-analytical and problem-solving skills with the ability to work in a fast-paced agile environment.
Physical Demands- Extensive sitting, phone, and computer use
- Extend and reach with hands and arms and use hands and fingers
- Occasionally required to bend, kneel, stoop, or crouch
- May be required to lift, move, and carry up to 15 lbs.
- Specific vision abilities required including close vision, color vision, depth perception, and the ability to adjust focus.
- Hearing ability to effectively communicate via the telephone and in person
- Ability to communicate verbally on the telephone and in person
- Fluency in the English language
- Extended hours may be needed
Work EnvironmentThe employee will primarily work in a typical office environment including use of cubicles, computers and overhead lighting. Temperature extremes will be minimal to nonexistent.
The noise level in the work environment is usually moderate. The employee will be required to use a computer, spreadsheets, database management, email, and the Internet. The employee is frequently required to use a calculator; fax, copy machine, and phone system.
BenefitsAntech offers an industry competitive benefits package and continues to invest in and evolve benefits programs that meet the health, wellness and financial needs of our associates.
Benefits eligiblity is based on employment status.
- Paid Time Off & Holidays
- Medical, Dental, Vision (Multiple Plans Available)
- Basic Life (Company Paid) & Supplemental Life
- Short and Long Term Disability (Company Paid)
- Flexible Spending Accounts/Health Savings Accounts
- Paid Parental Leave
- 401(k) with company match
- Tuition/Continuing Education Reimbursement
- Life Assistance Program
- Pet Care Discounts
