layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

Senior Product Security Engineer at United Talent Agency | LAYIQ

Product security strategy & architecture
Lead security design and architecture reviews for new and existing products, including web, mobile, and cloud-based custom applications, and provide clear, actionable recommendations
Support the security of UTA’s custom-built digital products and platforms, including web applications, cloud services, agentic workflows, data-driven tools, AI-enabled business tools, and custom tools used by employees, business teams, and external partners and clients - from design through deployment and ongoing operation
Partner with product and engineering leadership to define product security requirements, risk tolerances, and security roadmaps across multiple teams and initiatives
Conduct and facilitate threat modeling workshops to proactively identify emerging risks and attack vectors and drive mitigations into product design
Conduct security reviews for products and services deployed across AWS, Azure, and GCP including cloud-native architectures, and platform-specific security controls
Secure development lifecycle & testing
Own and mature the application and product security lifecycle, including threat modeling, secure design, secure coding practices, testing, and release validation
Assess and secure early-stage product design, architecture and workflows, associated with rapid prototyping and deployment
Drive the adoption of automated security checks in CI/CD pipelines (SAST, DAST, SCA, secrets scanning, etc.) and ensure they are tuned to balance risk reduction with developer velocity
Lead and coordinate application security testing efforts, including tool-based and manual reviews, and work closely with development teams to prioritize and remediate findings
Establish and evangelize secure coding standards, patterns, and reusable frameworks that can be leveraged across engineering teams
Lead API security assessments, including authentication/authorization validation for REST/GraphQL APIs and API gateway configuration reviews
Help establish security controls for AI-assisted software development, including AI-generated code review, agent-driven pull requests, dependency integrity, secrets prevention, and secure use of coding assistants such as Claude Code, Cursor, GitHub Copilot, or similar tools.
Operations, monitoring & incident response
Collaborate with security operations to ensure product-related logs, alerts, and events are captured, correlated, and integrated into monitoring and incident response workflows
Own vulnerability triage and management for product and application findings, including those surfaced through penetration tests and attack surface monitoring, covering risk assessment, remediation planning, and validation of fixes
Ensure products handle sensitive data appropriately, including data classification, storage, transit, and retention practices aligned with organizational security requirements
Tooling, enablement & leadership
Evaluate, select, and help implement product security focused tools and services, influencing build vs buy decisions
Develop documentation, playbooks, and training to raise the overall level of security awareness and capability across product and engineering teams
Provide best practices on the secure use of AI-assisted development tools, including risks around dependency integrity, code suggestions, and agent-driven changes
Partner with engineering, DevOps, and security operations to mature vulnerability operations, including reachability-based prioritization, AI-assisted triage and remediation, developer-native fix workflows, and automated validation that critical attack paths have been closed

Senior Product Security Engineer

Employer job description

What You Will Do

What You Will Need

What You Will Get

About UTA

About this listing