Product Security Engineer

About Us: Sitecores mission is to provide cutting-edge DXP solutions that enable the worlds greatest brands to craft truly unforgettable experiences for their customers. A highly decorated industry leader, Sitecore brings content, commerce, and data into one connected platform that delivers millions of digital experiences every day. Thousands of blue-chip companies, including American Express, Porsche, Starbucks, LOréal, and Volvo Cars, rely on Sitecore to provide more engaging, personalized customer experiences. Under the leadership of our new product-centric CEO, we are poised to continue to push the boundaries of marketing technology and shape the future of customer engagement. Learn more at Sitecore.com . Engagement Stream products & team: The Engagement Stream is a suite of SaaS products which enables our brands to understand users experiences — explore customer data management and audiences across multiple channels, deliver tested, personalized, and optimized experiences, transform site search experience that suggests and predicts relevant content and products as users type their search terms. These SAAS native products run on AWS based Cloud Infrastructure and consist of highly scalable data pipelines, orchestration, microservices, analytics platforms and rich user interfaces. Our engineering teams are responsible for the services and pipelines for these data products from design through development, quality, performance, production deployments and operations and monitoring. The team is also responsible for driving architectural evolution, best practices, and guidance for running highly available and performant microservices. It is a team of engineers with a mission to build a rock-solid service for Sitecore that supports 100s of engineers and 10s of millions of users today while continuing to scale rapidly. About the Role: We are looking for an experienced Product Security Engineer to work across the Engagement set of products. As a Product Security Engineer, you will partner with our multiple engineering teams, ensuring the security of our products and infrastructure by triaging security issues, reviewing system architectures, and coordinating external security scans and vulnerability remediation efforts. You will play a pivotal role in safeguarding our AWS cloud products and maintaining robust security protocols. What Youll Do:

• Implement Product Security designs and implement enterprise-class security systems for production environments.
• Integrate application security testing tools into the development and deployment pipeline, ensuring that every step of the SDLC follows security best practices.
• Ensure adherence to standard regulatory and compliance requirements by overseeing regular 3rd party security audits and penetration testing.
• Manage CI /CD processes, monitoring tooling like Wavefront and security tooling like WIZ
• Understand Data Architectures and modeling, including data retention and privacy

What You Need to Succeed:

• Hands-on experience coding on data architectures, microservices and CI/CD processes
• Hands-on experience with Security tooling such as WIZ
• Working experience with AWS and their security features. Ability to adapt to a dynamic and evolving cloud landscape, with a focus on scalability and flexibility in security solutions.
• Experience with container hosting and container orchestration (Kubernetes, Docker)
• Ability to coordinate and interpret external security scans.
• Knowledge of security frameworks and standards (e.g., ISO 27001, NIST, HIPAA, TISAX).

Additional Skills That Could Set You Apart:

• AZ500/SC100, CKS/CKA, AWS Certified Security - Specialty, CISSP certifications are a plus.
• Mindset of continuous delivery and all things automated.

How we hire: Sitecore is proud to be an equal-opportunity workplace. We are committed to equal employment opportunity without unlawful regard to race, color, ancestry, religion, gender, national origin, sexual orientation, age, citizenship, marital status, disability, veteran status or any other local legally protected characteristic.