Application Security - Design Reviews Threat Modelling(PSA)

Role & responsibilities

• Participate in security design reviews and threat modeling exercises for new products, services, and platform capabilities.
• Partner with engineering teams to identify security risks and recommend practical mitigations during the design and development process.
• Serve as a security consultant for product and engineering teams, answering security questions and providing guidance on secure implementation patterns.
• Review application and system architectures, technical designs, data flows, and deployment models to identify security risks and recommend secure design patterns
• Partner with engineering teams developing AI and machine learning features to identify emerging security risks and recommend secure implementation patterns.
• Help maintain and improve security standards, guidance, reference architectures, and internal documentation.
• Develop or enhance tooling and automation that improve the efficiency of threat modeling, security reviews, and risk assessment processes.
• Collaborate with other Product Security engineers to perform application security assessments and investigate security concerns identified during development.
• Contribute to developer education efforts through documentation, office hours, workshops, or security awareness initiatives.
• Support security incident investigations and root cause analysis when application security issues are discovered.
• Participate in security design reviews and threat modeling exercises for new products, services, and platform capabilities.
• Partner with engineering teams to identify security risks and recommend practical mitigations during the design and development process.
• Serve as a security consultant for product and engineering teams, answering security questions and providing guidance on secure implementation patterns.
• Review application and system architectures, technical designs, data flows, and deployment models to identify security risks and recommend secure design patterns
• Partner with engineering teams developing AI and machine learning features to identify emerging security risks and recommend secure implementation patterns.
• Help maintain and improve security standards, guidance, reference architectures, and internal documentation.
• Develop or enhance tooling and automation that improve the efficiency of threat modeling, security reviews, and risk assessment processes.
• Collaborate with other Product Security engineers to perform application security assessments and investigate security concerns identified during development.
• Contribute to developer education efforts through documentation, office hours, workshops, or security awareness initiatives.
• Support security incident investigations and root cause analysis when application security issues are discovered.

Preferred candidate profile

• Experience with threat modeling methodologies such as STRIDE or similar frameworks.
• Familiarity with AI-assisted development tools, AI-powered applications, or emerging AI security considerations.
• Experience creating technical documentation, security guidance, or developer-facing educational content.
• Exposure to security tooling such as SAST, DAST, SCA, IaC scanning, or vulnerability management platforms.