Staff Product Security Engineer Job Description Why A365 Software Engineering? Build the cloud platform that's transforming electronics design. Altium 365 for cloud lets design engineers communicate, collaborate and bring their ideas to market more efficiently than any platform in the industry. We are looking for a Senior Product Security Engineer to extend our Product Security capability with a strong focus on continuous vulnerability discovery and prevention. The goal is simple: ensure that both existing functionality and new changes remain secure over time, and that real vulnerabilities are discovered before customers do. Key Responsibilities Security Regression Testing Design and maintain security regression test suites covering critical application flows Ensure vulnerabilities, once fixed, are permanently prevented from recurring Integrate security regression into CI/CD pipelines Define coverage targets for security-critical areas (auth, access control, APIs, data flows) Threat Modeling Lead structured threat modeling sessions for existing system components and new features and architectural changes Identify attack surfaces, abuse cases, and trust boundaries Translate threats into test cases, security requirements, mitigation plans Ensure threat modeling becomes a continuous lifecycle activity Offensive Security / Red Team Activities Perform manual and automated security testing simulating real attacker behavior Focus on high-impact vulnerabilities, not theoretical findings Validate exploitability and business impact Partner with engineering teams to: reproduce issues, prioritize fixes, validate remediation OWASP Top 10-Driven Vulnerability Discovery Continuously assess the platform against OWASP Top 10 categories Use deep product knowledge to find non-obvious, context-specific vulnerabilities Go beyond tooling (DAST/SAST) to uncover logic flaws and abuse paths Security Assurance for Product Changes Review new features and changes for security risks Ensure all changes are threat-modeled and covered by regression tests Act as a security gatekeeper without becoming a bottleneck: enable teams with guidance and tooling, avoid heavy process overhead Collaboration
Staff Product Security Engineer employer: GCA Altium
Altium Limited is an exceptional employer, offering a dynamic work culture that prioritises innovation and collaboration in the fast-paced field of cloud and app security. Employees benefit from continuous professional development opportunities, a supportive team environment, and the chance to make a significant impact on the security of the Altium 365 platform. Located in a vibrant tech hub, Altium fosters a culture of creativity and growth, making it an ideal place for those seeking meaningful and rewarding employment.
