Product Security Specialist

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Product Security Specialist II based in Canada.

• Collaborate with developers, product managers, customer experience teams, customers, and partners to communicate security requirements clearly and adapt technical explanations to different audiences.
• Manage security questionnaires, assessments, and customer or partner security meetings.
• Develop, maintain, and improve product security policies, standards, procedures, and documentation.
• Contribute to risk management activities by maintaining the security risk register and monitoring compliance.
• Conduct security and compliance reviews of third-party libraries, vendor components, and software dependencies.
• Support the AI security and governance program, including standards for AI-assisted software development and training initiatives.
• Contribute to the vulnerability disclosure process, including CVE registration, security advisory preparation, and post-incident reviews.
• Own ongoing security coverage for applications and services developed outside core Engineering.
• Assess the security posture of non-engineering applications and services and coordinate remediation.
• Support the integration of security practices throughout the software development lifecycle.
• Track security performance indicators and prepare reports for leadership and external stakeholders.
• Analyze security findings and emerging risks to prioritize actions and provide practical recommendations.
• Work independently to manage assigned security domains while collaborating with the broader security team.
• Identify opportunities to improve security processes and overall security program maturity.

• At least three years of professional experience in product security, application security, or a closely related cybersecurity discipline.
• Strong technical cybersecurity knowledge, including common vulnerability classes, secure software development practices, and application security tools.
• Familiarity with the OWASP Top 10 and security testing tools and practices, including SAST, DAST, and SCA.
• Proficiency in Python for automation, security tooling, data analysis, or workflow improvement.
• Experience with agentic AI systems and understanding of security considerations associated with AI-assisted development.
• Demonstrated ability to explain security concepts clearly to stakeholders with varying levels of technical knowledge.
• Strong analytical and problem-solving skills.
• Excellent written communication and documentation skills.
• A relevant degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• Strong organizational skills and the ability to manage multiple security responsibilities.
• A collaborative, proactive mindset with sound judgment and attention to detail.

• Fully remote opportunity.
• Additional qualifications considered an asset: familiarity with SOC 2 and ISO 27001, professional security certifications such as CISSP or CISM, experience with FME in production environments, experience with vulnerability disclosure coordination.