Senior Security Engineer 4, Product & Application Security

Atlanta

PagerDuty empowers teams of all kinds to do the critical work that moves business forward through the PagerDuty Operations Cloud.

PagerDuty is seeking a Senior Security Engineer to join our diverse, customer-focused team! As a Senior Security Engineer , you will be a key contributor in leading, driving and delivering security initiatives for PagerDuty’s SaaS offerings, focusing on application & product security through architecture reviews, threat modeling sessions, and defining secure-by-design product standards and protections that support PagerDuty’s security mission. You’ll collaborate closely with engineers across many product development teams to ensure we deliver secure, highly reliable, and scalable solutions to our customers.

KEY RESPONSIBILITIES

• Embrace the role of hands-on technical lead in defining product security standards and guiding platform protections.
• Establish criteria and conduct comprehensive security reviews throughout all stages of product development to identify and address security risks.
• Perform regular threat assessments, coordinate with third-party testers for penetration testing, and conduct internal penetration testing to identify and mitigate security risks.
• Mentor and guide team members to ensure product and business objectives are prioritized in project implementations, fostering a strong documentation culture with project charters and design documents.
• Work with loosely defined requirements where you exercise your analytical skills to clarify questions, share your approach, and collaborate with the team to design and implement effective security frameworks.
• Participate in the team’s On-Call rotation, triaging and addressing security issues as they arise, and implement measures to prevent future occurrences.
• Enable service team security implementations by developing security-as-code constructs, including infrastructure-as-code (IaC) modules, libraries and frontend components, while creating and maintaining developer-focused documentation to promote easy adoption.
• Establish and uphold baseline standards and hardened configurations for platform components.
• Continuously enhance security frameworks by focusing on product security standards and software supply chain protections, tailored for application security in cloud-native, microservices environments.

BASIC QUALIFICATIONS

• 5+ years of experience as a Security Engineer focused on product and application security in a cloud-native, microservices environment, preferably within AWS.
• Demonstrated experience with security standards and patterns for APIs, microservices, and serverless architectures, including best practices for secure SDLC integration and development.
• Familiarity with cloud-native product technologies including:
• Vulnerability detection via multiple approaches including SAST, DAST, SCA, and runtime (e.g., Qualys/Nessus, Wiz, Snyk, etc.)
• Security event collection and analysis (e.g., SIEM such as: SumoLogic, LogRythm, or Splunk, etc.)
• Container Security (e.g., Kubernetes, EKS)
• CI/CD technologies and integrations (e.g., CircleCI, Buildkite, Helm, Terraform, Chef)
• Security Incident Response & Risk Management processes and tools
• 4 years of experience and proficiency in at least one programming language and framework (e.g., Python, Bash, Phoenix/Elixir, Java, Ruby on Rails).
• Exceptional written, oral communication, and interpersonal skills.
• Strong organizational skills with the ability to successfully manage multiple priorities and deadlines.

PREFERRED QUALIFICATIONS

• Strong hands-on experience in deploying secure coding practices, automation, threat modeling and application security solutions.
• Strong understanding of modern application architectures, including microservices, containerization, and cloud-native applications.
• Experience with obtaining and maintaining FedRAMP authorization.
• Experience working at a SaaS company larger than 1,000 employees and $100M in revenue.
• Ability to analyze complex problems, and implement these solutions with a growing proficiency in change management.
• Demonstrates a strong sense of ownership and a commitment to excellence in securing systems within a SaaS environment, with the ability to identify and implement resilient, effective product security measures.
• Proven history of mentoring and coaching.

About PagerDuty

PagerDuty, Inc. (NYSE:PD) is a global leader in digital operations management. The PagerDuty Operations Cloud revolutionizes how critical work gets done, and powers the agility that drives digital transformation.

PagerDuty is committed to creating a diverse environment and is an equal opportunity employer. PagerDuty does not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, parental status, veteran status, or disability status.