Senior Product Security Engineer, Anaplan

• 2+ years of experience in application security, software engineering, or a related technical field with a focus on security
• Strong understanding of at least one programming language (e.g., Java, Python)
• Experience working within CI/CD pipelines and integrating security controls
• Ability to communicate security concepts clearly to technical and non-technical stakeholders
• Demonstrated experience conducting basic threat modeling or risk assessments
• Track record of successfully working independently on technical projects
• Understanding of secure software development practices and principles

Desirable

• As a Product Security Engineer, you will join Anaplan’s dedicated Product Security team, which is responsible for embedding security into every stage of the product development lifecycle
• This team partners closely with engineering, product, and infrastructure groups to implement security best practices, evaluate tools, and respond to emerging threats
• You will report to the Product Security Manager and work alongside experienced security engineers while taking ownership of specific initiatives and contributing independently to the security posture of Anaplan’s platform
• Collaborate with development and product teams to integrate security controls across the software development lifecycle (SDLC)
• Conduct basic threat modeling exercises to identify and mitigate potential security vulnerabilities
• Enhance and maintain security tooling in CI/CD pipelines, improving detection and response times
• Take ownership of vulnerability management processes and collaborate on integrating and operationalizing Application Security Posture Management (ASPM) tooling
• Respond to security incidents and coordinate remediation efforts with cross-functional teams
• Own and lead smaller-scale security projects from planning to execution
• Advocate for secure design patterns and help drive adoption of secure coding practices
• Contribute to documentation and internal knowledge-sharing related to secure development practices
• Support broader security initiatives by evaluating and implementing security tools and techniques