Staff Product Security Engineer, Illumio
$194-233k
4 days a week in office (Sunnyvale, CA)
Automated enforcement against cyberattacks
Open for applications
Automated enforcement against cyberattacks
501-1000 employees
Open for applications
$194-233k
4 days a week in office (Sunnyvale, CA)
501-1000 employees
Company mission
To enable every organization to realize a future without high-profile breaches.
Role
Who you are
- This role requires a strong technical foundation, excellent written and verbal communication skills, and the ability to influence engineering teams to adopt secure-by-design principles
- 10–12 years of product security or application security experience required
- 2-3 years of software development experience preferred
- Bachelor's degree in computer science or related field; or Master’s degree in Cybersecurity
- Relevant coursework in secure coding, application security, network security, security architecture or threat modeling
- Proficiency in programming languages such as Python, Java, Go, or C++
- Hands-on experience with SAST, DAST, SCA, container security, and cloud-native security tools
- Familiarity with security automation, CI/CD pipelines, and script-based tooling
- Strong understanding of full-stack vulnerabilities, MITRE attack framework, OWASP Top 10 for existing and emerging technologies, secure coding, and microservice architectures
- Experience with supply chain security and open-source dependency management is a plus
- Strong analytical and problem-solving capabilities
- Excellent written and verbal communication skills
- Ability to work independently in a fast-paced, engineering-driven environment
- Empathy for developers and the ability to build practical guardrails
- Able to lead multi-year security programs, collaborate cross-functionally, and present initiatives to leadership
What the job involves
- Our Engineering team is shaping the future of cybersecurity. We thrive on visionary leadership, autonomy, and ownership, fostering a culture of innovation that propels us forward in the ever-evolving cybersecurity landscape
- As a Staff Product Security Engineer, you will play a critical role in strengthening the security posture of our products across their entire lifecycle
- You will partner closely with Engineering, Product Management, and cross‑functional stakeholders to design secure architectures, evaluate complex systems, perform hands-on security testing, and build automation that scales security across the organization
- You will work independently with minimal oversight, exercising sound judgment to solve problems of diverse scope
- You will also drive long-term security maturity by leading multi-year security initiatives that measurably improve our security posture
- Security Architecture & Design:
- Own and lead end-to-end security architecture and design reviews for prototypes, components, and new product features in distributed cloud environments
- Develop and maintain threat models to proactively identify threats, misuses, and residual risks
- Provide security consulting for emerging technologies, such as AI/ML, defining security requirements and design guardrails
- Author and maintain product security policies, standards, and architectural guidance
- Security Program Leadership:
- Lead multi-year product security programs, driving roadmap planning, execution, cross-functional alignment, and measurable security improvements
- Develop scalable security strategies that align with engineering velocity, product roadmaps, and business priorities
- Influence teams across organizations to adopt secure design and secure development practices
- Hands-On Security Testing:
- Perform manual and automated security testing to validate real-world exploitability of vulnerabilities
- Conduct manual secure code reviews with a focus on security and privacy risks
- Execute DAST, API security testing, and container security scanning
- Validate reported vulnerabilities and support customer security responses
- Vulnerability Management:
- Drive end-to-end vulnerability management, from identification to remediation across code, containers, infrastructure, and cloud
- Utilize full-stack scanning tools (SAST, SCA, secrets scanning, container scanning) to uncover vulnerabilities early
- Partner with engineering teams to prioritize and remediate vulnerabilities based on risk and product impact
- Support product security incident responses, including triage, root-cause analysis, and remediation guidance
- Enable Trust office to create and share customer vulnerability response
- Security Automation & Tooling:
- Build, enhance, and maintain security automation for scalable vulnerability detection, triage, and reporting
- Promote the adoption of golden secure images, secure-by-default tooling, and supply chain security improvements
- Improve open-source resiliency through integrity checks, dependency monitoring, and automated safeguards
- Enable developer self-service through internal security tooling and guidance frameworks
- Security Enablement & Knowledge Development:
- Deliver technical security training for engineering teams, including secure coding, secure design, and modern threat awareness
- Build and maintain a comprehensive security knowledge base, including best practices, threat models, secure design patterns, and remediation guides
- Produce security evidence and documentation to support compliance, audits, certifications, and customer requirements
- Prepare and present product security metrics to leadership and key stakeholders
Our take
Cybersecurity remains an ongoing battle, with evolving cyberthreats and ever-more determined cybercriminals, and major data breaches such as the SolarWinds hack have the potential to cause widespread disruption. Illumio is taking a different approach to most of the mainstream security companies, with a process called "microsegmentation". This makes it easier to guard companies from security breaches, and contain any breaches that occur.
Detection of viruses is no longer considered sufficient to keep companies and individuals safe. Illumio takes a “zero trust” approach, in which everything is viewed as suspicious, a similar approach to that which is used by the White House. The company operates at the cutting edge of microsegmentation, focusing on protecting cloud datacenters and workloads. With more and more companies moving to the cloud, this approach is crucial.
Illumio also protects endpoints, partnering with big players such as Citrix, Amazon Web Services, and Splunk. A collaboration with Appgate, a Zero Trust secure access company, delivers the industry's first integrated Zero Trust Network Access and Segmentation solution, which can reduce risk across hybrid infrastructure, and proves Illumio's dedication to innovating the space. Additionally, the company announced a Federal Risk and Authorisation Management Program (FedRAMP), which is tailored to assist federal agencies in reducing risk.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
1% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Jun 2021
$225m
SERIES F
Feb 2019
$65m
SERIES E
Total funding: $566.6m
Company benefits
- Medical, Dental, Vision Coverage
- Health and Dependent Savings Accounts
- Life and Disability Programs
- Paid Parental Leave
- Voluntary Benefit Programs
- Company Sponsored Wellness Program
- Wellness Reimbursement Program
- Retirement Savings
- Equity Opportunities
- Paid time off and Paid Holidays
- Employee Incentive Program
Company HQ
Sunnyvale, CA
Leadership
Andrew Rubin
(Co-Founder & CEO)Started in Business Development, as an Analyst at VoiceNet Communications, and as a Director at VoiceNet. Worked at Cymtec Systems for over 8 years, promoted from VP of Sales to CEO. Seed Investor in Tory Burch, and Powermat. Current Strategic Advisor to Menlo Security, and Bolt.
PJ Kirner
(Co-Founder & Strategic Advisor)Studied Computer Science at Cornell. Worked as an Engineer Manager for over 6 years at Trilogy. Software Architect at Funkware for over 3 years. Was Principal Systems Engineer at Cluster File Systems. Distinguished Engineer for over 5 years at Juniper Networks. Was CTO of Cymtec Systems.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 51 more jobs at Illumio