Security Engineer, Product Security

Recorded Future is looking for a Security Engineer, Product Security to be a vital member of the Product Security team, dedicated to supporting all facets and functions of Product Security across Recorded Future. This role is highly collaborative and technical, demanding a proactive approach to embedding security throughout the product development lifecycle and operational processes. The core mission is to safeguard our product and infrastructure through a blend of preventative design, responsive investigation, and continuous improvement of security controls.

 

What You’ll Do:

• Design and Implement Security Solutions: Take ownership of designing, building, and deploying robust, scalable security solutions and infrastructure components. This involves selecting, configuring, and integrating security tools and technologies that enhance the overall security posture of our products and platform, ensuring security is "baked in," not "bolted on."
• Threat Detection and Response: Actively participate in the monitoring, investigation, and triage of complex security alerts and incidents. You will be responsible for developing, writing, and continuously fine-tuning automated alert systems and detection rules (e.g., in SIEM/SOAR platforms) to improve signal-to-noise ratio and accelerate the response time to potential threats.
• Security Architecture and Design Review: Serve as a security subject matter expert during the product development process. Conduct comprehensive security reviews, threat modeling, and risk assessments for all proposed new features, architectural changes, and major system updates. Provide actionable feedback to engineering teams to ensure designs meet stringent security standards and comply with internal policies and external regulations.
• Engineering Collaboration and Guidance: Work hand-in-hand with software engineers, DevOps teams, and product managers across the organization. You will offer expert security guidance, answer complex security-related questions, troubleshoot implementation issues, and mentor engineers on secure coding practices and security design principles, fostering a culture of security awareness.
• Platform Security Team Participation: Contribute to the Platform Security team's daily operational tasks, including maintaining security documentation, managing security-related tickets, participating in on-call rotations as required, and driving initiatives to improve team processes and efficiency.

 

What You’ll Bring:

• 3+ years of proven relevant professional experience
• Strong foundational knowledge of computer security principles
• Background in coding/scripting is desired, preferably Go and/or Python
• Cloud security knowledge is desired, preferably AWS or GCP
• A keen interest in finding and balancing security needs with developer productivity
• Excellent communication skills and the ability to effectively build relationships across different teams
• A strong ability to assess risks and make informed decisions
• Proficient in network protocols, including TCP/IP, HTTP, REST, and GraphQL