Product Security Expert

This is a remote position.

We are looking for a Product Security Engineer to join our team and support vulnerability triage, risk-based testing, and test automation initiatives across modern cloud-based platforms.

In this role, you will focus on identifying, classifying, and validating security findings while contributing to a robust testing strategy and automation framework. You will work closely with internal teams using asynchronous communication and apply both analytical and exploratory approaches to ensure high-quality software delivery.

The role combines application security, vulnerability assessment, and quality assurance, with a strong focus on structured analysis, automation, and cloud environments.

Responsibilities

Review and triage security findings from ASPM tools

Classify findings as true positive, false positive, or requires additional context

Document classification rationale using standardized templates

Maintain and organize findings backlog per product

Flag ambiguous or unclear findings for further review

Work across multiple vulnerability categories

SAST (code-level vulnerabilities)

SCA (dependency and transitive risks)

Secret detection (credentials exposure)

CSPM (Azure cloud misconfigurations)

Develop and refine a risk-based testing strategy

Apply exploratory testing techniques for complex and high-risk scenarios

Validate end-to-end business flows from a user perspective

Build and maintain automated test suites using

Playwright (TypeScript) for new tests

Selenium (C#) for existing legacy tests

Support migration from Selenium to Playwright over time

Collaborate with the team to ensure scalable and maintainable test architecture

Leverage AI tools to accelerate

Test design

Test data generation

Automated test development

Continuously improve QA processes based on

Production incidents

User feedback

System logs and analytics

Requirements

BSc or MSc in Computer Science, Engineering, or a related field

Experience with vulnerability assessment and security concepts (OWASP Top 10 level)

Familiarity with Azure cloud services

Ability to read and understand code (e.g., .NET/C#, JavaScript/TypeScript, Python)

Understanding of dependency scanning and transitive dependencies

Experience with test automation frameworks (Playwright and/or Selenium)

Strong attention to detail and structured work approach

Ability to work independently with asynchronous communication

Fluency in written English

Hands-on experience with

ASPM / SAST / SCA tools

Test automation frameworks (Playwright, Selenium)

Exploratory and risk-based testing strategies

Nice-to-have

Experience with tools such as

Snyk

Checkmarx

Semgrep

SonarQube

Aikido

Wiz

OX or similar

Experience using AI tools for triaging and test automation

Strong communication skills

Analytical mindset with a focus on accuracy over speed

Ability to balance security, quality, and business priorities

Collaborative and proactive attitude

If this sounds like you, share your CV with us and let’s talk.