Product Security Engineer

About the role

Quvia is seeking a Product Security Engineer to strengthen the security posture of its cloud‑native products throughout their lifecycle. The role works closely with product, engineering and operations teams to embed security into design, development and deployment.

Key responsibilities

• Collaborate with product and engineering teams to review designs and architectures, identifying security risks and recommending mitigations.
• Conduct threat‑modeling exercises for applications and systems to proactively address potential weaknesses.
• Perform manual and automated security code reviews, targeting OWASP Top 10, CWEs and other common flaws.
• Participate in vulnerability management, including triage, prioritization and tracking of findings from pen‑tests, bug bounties and internal scans.
• Integrate security testing (SAST, DAST, SCA) into CI/CD pipelines and work with QA to ensure continuous protection.
• Develop and maintain security tooling and automation to streamline secure development practices.

Required profile

• Deep understanding of secure software development and application security frameworks.
• Experience with cloud‑native product architectures and secure design principles.
• Proven ability to assess product risks and define secure development standards.
• Hands‑on mindset with a strategic outlook for embedding security throughout the software lifecycle.

Required skills

• OWASP Top 10
• Common Weakness Enumerations (CWEs)
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Software Composition Analysis (SCA)
• CI/CD pipeline integration
• Threat modeling
• Security code review
• Vulnerability management processes