Product Security Operations Engineer - Remote / Telecommute

We are looking for Product Security Operations Engineer - Remote / Telecommute for our client in San Jose CA

Job Title: Product Security Operations Engineer - Remote / Telecommute

Job Location: San Jose CA

Job Type: Contract

Job Overview:

Pay Range: $86.14/hr - $131.08/hr

Requirement/Must Have:

• 5+ years in Security Operations, DevSecOps, or Product Security, with a track record of managing and reducing security debt in complex environments.
• Strong verbal and written communication skills.
• Ability to communicate effectively with stakeholders.

Responsibilities:

• Act as a technical lead for managing external dependencies, driving the strategy and execution for upgrades and patching across multiple product lines.
• Work closely with stakeholders across Engineering, Product Management, and DevOps to prioritize security requirements and align them with existing release roadmaps.
• Translate high-level security policies into clear, actionable product requirements and technical guidance that development teams can implement effectively.
• Leverage data, including Software Bill of Materials (SBOM) and asset intelligence, to identify systemic risks in the supply chain and report on remediation progress to leadership.
• Drive security projects with a focus on clear ownership, milestone tracking, and proactively resolving conflicts in priority to ensure successful delivery.

Nice to Have:

• Proficiency in scripting (e.g., Python, Go) to automate the tracking of library versions and vulnerability status.
• Familiarity with supply chain security standards (such as SBOM/VEX) and SCA (Software Composition Analysis) tooling.
• Experience in a global, distributed environment where managing cross-functional dependencies is a core part of the culture.
• A background in Technical Program Management (TPM) or Engineering Management.

Skills:

• Technical depth in security operations.
• Understanding of the software development lifecycle (SDLC) and complexities involved in upgrading core libraries in a large-scale environment.
• Exceptional organizational skills and the ability to manage complex, multi-quarter security initiatives from start to finish.