Senior Product Security Engineer, Mirantis
+ Stock options
Enterprise on-prem cloud & kubernetes support
Job no longer available
Enterprise on-prem cloud & kubernetes support
501-1000 employees
Job no longer available
+ Stock options
501-1000 employees
Company mission
To empower developers and innovators to create extraordinary products and services by automating the discovery, integration, and operation of the best cloud and open-source technologies for their unique needs.
Role
Who you are
- 5+ years of experience in product security, application security, or a related security engineering role
- Strong understanding of common vulnerabilities (e.g., OWASP Top 10, SANS Top 25) and secure development best practices
- Demonstrated experience performing offensive security activities such as manual penetration testing, threat modeling, and exploitation of vulnerabilities
- Hands-on experience with security testing and automation, including:
- SAST/DAST tooling and pipelines
- Container image scanning (e.g., Trivy, Grype, Anchore)
- IaC security (e.g., Terraform, Helm, Kics, Checkov)
- Dependency and supply chain security tooling
- Familiarity with vulnerability scanning and management tools, application security testing, and manual review techniques
- Experience with containerized environments, Kubernetes, and cloud platforms
- Proven ability to integrate security controls into CI/CD pipelines and automate security testing as part of the SDLC
- Excellent collaboration and communication skills, with the ability to work closely with product and engineering teams
- Experience with SOC 2, ISO 27001, or similar compliance frameworks is a plus
- Relevant certifications such as OSCP, OSEP, OSWE, or SANS/GIAC certifications (e.g., GPEN, GWEB, GWAPT, GCSA), or other equivalent offensive security and application security credentials are strongly preferred
- Proficiency in scripting or programming languages (e.g., Go, Python or similar) is an advantage
What the job involves
- Mirantis is seeking a Senior Product Security Engineer to help secure our portfolio of products and services, including enterprise software and critical infrastructure
- This role is part of our growing Product Security program and will play a key role in implementing security controls, driving remediation efforts, supporting compliance initiatives, and partnering with engineering teams to ensure a secure software development lifecycle
- As a Senior Product Security Engineer, you will work closely with engineering, security operations, and compliance teams to reduce risk across Mirantis products. You will have the opportunity to shape security strategy, automate controls, and ensure security is embedded into every stage of product development and operations
- Design, implement, and maintain security controls across applications, infrastructure, and CI/CD pipelines to align with internal security standards and regulatory frameworks (e.g., SOC 2, ISO 27001)
- Drive adoption of modern security tooling and practices including SAST, DAST, container image scanning, Infrastructure as Code (IaC) security, and dependency analysis
- Lead vulnerability assessments, application security reviews, and penetration tests
- Triage and prioritize findings, collaborating with product and engineering teams to drive timely and measurable remediation
- Proactively identify and exploit vulnerabilities to strengthen product security posture
- Partner with Security Operations and Engineering to investigate application and infrastructure vulnerabilities. Contribute to root cause analysis, remediation plans, and long-term risk reduction
- Support security reviews, audits, and compliance initiatives through documentation, evidence collection, and coordination with external auditors or vendors
- Build and maintain security expertise across multiple Mirantis products to strengthen team resilience, provide flexible coverage, and help shape a scalable, sustainable Product Security program
- Champion secure design and development practices, provide actionable guidance during security reviews, and drive security automation efforts across the SDLC
Our take
The global cloud-native applications market has grown exponentially in recent years since more and more companies require scalable, flexible, and hardy applications to meet customer expectations. Specializing in building and managing open cloud software is Mirantis, a ZeroOps cloud-native platform.
Mirantis has several products that are now trusted by millions of users, with solutions covering onboarding, simplification, and much more. With the ever-changing landscape of cloud computing, the company boasts the ability to evolve with the changes, offering up-to-date products that allow developer customers to step away from editing infrastructure and focus on coding and creation.
With over 1M active users it's no surprise the company had a successful 2024, welcoming new partnerships and offerings as well as being recognized as a leader in Omdia Universe and as a Challenger in 2024 Gartner Magic Quadrant for Container Management. These ongoing achievements signal a future of excitement and promise for the company and it will be interesting to see what's next for it.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 4 rounds)
Aug 2015
$100m
SERIES C
Oct 2014
$100m
SERIES B
Total funding: $220m
Company HQ
Pruneyard / Dry Creek, Campbell, CA
Leadership
Adrian Ionel
(Co-Founder & CEO)Also CEO and Founder of Dorsal Corporation. Previously the VP and General Manager (EMEA) for Qualys, and was CEO of eOnline.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 18 more jobs at Mirantis