Senior Product Security Engineer

Mirantis is seeking a Senior Product Security Engineer to help secure our portfolio of products and services, including enterprise software and critical infrastructure. This role is part of our growing Product Security program and will play a key role in implementing security controls, driving remediation efforts, supporting compliance initiatives, and partnering with engineering teams to ensure a secure software development lifecycle.

As a Senior Product Security Engineer, you will work closely with engineering, security operations, and compliance teams to reduce risk across Mirantis products. You will have the opportunity to shape security strategy, automate controls, and ensure security is embedded into every stage of product development and operations.

Key Responsibilities

Secure Products & Infrastructure:

• Design, implement, and maintain security controls across applications, infrastructure, and CI/CD pipelines.

• Embed security requirements aligned with SOC 2, ISO 27001, and internal standards.

• Drive adoption and operationalization of SAST, DAST, container scanning, IaC security, and dependency analysis tooling.

• Integrate automated security testing into the SDLC to enable secure-by-design development.

Offensive Security & Vulnerability Management:

• Lead application security reviews, threat modeling, vulnerability assessments, and penetration testing.

• Validate and prioritize findings based on exploitability and business impact.

• Partner with engineering teams to ensure timely, measurable remediation.

• Proactively identify and demonstrate security weaknesses to improve overall product resilience.

Incident Response & Risk Reduction:

• Support investigation of product and infrastructure security incidents.

• Contribute to root cause analysis and durable remediation strategies.

• Identify systemic control gaps and implement long-term risk mitigation measures.
   

Compliance & Assurance:

• Support product-level security reviews and audit activities.

• Coordinate evidence collection and control validation for SOC 2, ISO 27001, and enterprise requirements.

• Translate compliance requirements into actionable engineering controls.

Cross-Product Security Leadership:

• Develop and maintain security expertise across multiple Mirantis products.

• Standardize security practices and tooling across teams.

• Strengthen program scalability and reduce single-point-of-failure risk.

Security Advocacy & Enablement:

• Champion secure design principles and modern application security practices.

• Provide actionable guidance during architecture and code reviews.

• Drive continuous improvement and automation across the SDLC.