Product Security Expert

Job Description This is a remote position. We are looking for a Product Security Engineer to join our team and support vulnerability triage, risk-based testing, and test automation initiatives across modern cloud-based platforms. In this role, you will focus on identifying, classifying, and validating security findings while contributing to a robust testing strategy and automation framework. You will work closely with internal teams using asynchronous communication and apply both analytical and exploratory approaches to ensure high-quality software delivery. The role combines application security, vulnerability assessment, and quality assurance, with a strong focus on structured analysis, automation, and cloud environments. Responsibilities: Review and triage security findings from ASPM tools Classify findings as true positive, false positive, or requires additional context Document classification rationale using standardized templates Maintain and organize findings backlog per product Flag ambiguous or unclear findings for further review Work across multiple vulnerability categories: SAST (code-level vulnerabilities) SCA (dependency and transitive risks) Secret detection (credentials exposure) CSPM (Azure cloud misconfigurations) Develop and refine a risk-based testing strategy Apply exploratory testing techniques for complex and high-risk scenarios Validate end-to-end business flows from a user perspective Build and maintain automated test suites using: Playwright (TypeScript) for new tests Selenium (C#) for existing legacy tests Support migration from Selenium to Playwright over time Collaborate with the team to ensure scalable and maintainable test architecture Leverage AI tools to accelerate: Test design Test data generation Automated test development Continuously improve QA processes based on: Production incidents User feedback System logs and analytics Requirements: BSc or MSc in Computer Science, Engineering, or a related field Experience with vulnerability assessment and security concepts (OWASP Top 10 level) Familiarity with Azure cloud services Ability to read and understand code (e.g., .NET/C#, JavaScript/TypeScript, Python) Understanding of dependency scanning and transitive dependencies Experience with test automation frameworks (Playwright and/or Selenium) Strong attention to detail and structured work approach Ability to work independently with asynchronous communication Fluency in written English Hands-on experience with: ASPM / SAST / SCA tools Test automation frameworks (Playwright, Selenium) Exploratory and risk-based testing strategies Nice-to-have: Experience with tools such as: Snyk Checkmarx Semgrep SonarQube Aikido Wiz OX or similar Experience using AI tools for triaging and test automation Strong communication skills Analytical mindset with a focus on accuracy over speed Ability to balance security, quality, and business priorities Collaborative and proactive attitude If this sounds like you, share your CV with us and let’s talk.