{"id":121562,"url":"https://alion.io/job/renesas-electronics-staff-product-security-engineer-6","title":"Staff Product Security Engineer","company":{"id":3481,"name":"Renesas Electronics","domain":"renesas.com","url":"https://alion.io/company/renesas-electronics","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":114,"ghost_share":0,"stale_share":0.982,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Wrocław, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":126000,"period":"year","method":"role_seniority_country_cell","sample_n":14},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Red Teaming","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AWS","optional":true}],"status":"live","first_seen_at":"2026-08-25T10:49:09Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-11-04T01:51:45Z","board_verified":true,"closed_at":null,"days_open":70,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":70},"description":"Why A365 Software Engineering?\nBuild the cloud platform that’s transforming electronics design. Altium 365 for cloud lets design engineers communicate, collaborate and bring their ideas to market more efficiently than any platform in the industry.\nWe are looking for a Senior Product Security Engineer to extend our Product Security capability with a strong focus on continuous vulnerability discovery and prevention.\nThis role is responsible for:\nBuilding and executing security regression testing\nDriving threat modeling across existing and new functionality\nConducting targeted offensive security activities (Red Team-style testing)\nIdentifying real vulnerabilities based on a deep understanding of our platform and the OWASP Top 10 Web Application Security Risks\nThe goal is simple: ensure that both existing functionality and new changes remain secure over time, and that real vulnerabilities are discovered before customers do.\nKey Responsibilities\nSecurity Regression TestingDesign and maintain security regression test suites covering critical application flows\nEnsure vulnerabilities, once fixed, are permanently prevented from recurring\nIntegrate security regression into CI/CD pipelines\nDefine coverage targets for security-critical areas (auth, access control, APIs, data flows)\n\nThreat ModelingLead structured threat modeling sessions for:Existing system components\nNew features and architectural changes\n\nIdentify attack surfaces, abuse cases, and trust boundaries\nTranslate threats into:Test cases\nSecurity requirements\nMitigation plans\n\nEnsure threat modeling becomes a continuous lifecycle activity\n\nOffensive Security / Red Team ActivitiesPerform manual and automated security testing simulating real attacker behavior\nFocus on high-impact vulnerabilities, not theoretical findings\nValidate exploitability and business impact\nPartner with engineering teams to:Reproduce issues\nPrioritize fixes\nValidate remediation\n\nOWASP Top 10-Driven Vulnerability DiscoveryContinuously assess the platform against OWASP Top 10 categories\nUse deep product knowledge to find non-obvious, context-specific vulnerabilities\nGo beyond tooling (DAST/SAST) to uncover logic flaws and abuse paths\n\nSecurity Assurance for Product ChangesReview new features and changes for security risks\nEnsure all changes are:Threat-modeled\nCovered by regression tests\n\nAct as a security gatekeeper without becoming a bottleneck:Enable teams with guidance and tooling\nAvoid heavy process overhead\n\nCollaboration & EnablementWork closely with:Engineering teams\nArchitecture\nSRE / Platform teams\n\nContribute to secure-by-design practices\nSupport developers in understanding and fixing vulnerabilities\nHelp scale security through:Reusable patterns\nAutomation\nSecurity guidance\n\n Required Qualifications\n5+ years in Application / Product Security\nBachelor's Degree or equivalent of 12 years of work experience \nStrong hands-on experience in:Web application security testing\nAPI security\nThreat modeling methodologies\n\nDeep understanding of OWASP Top 10\nExperience with:Manual penetration testing\nSecurity regression testing\nCI/CD security integration\n\nAbility to identify business logic vulnerabilities\nStrong understanding of:Authentication, authorization, and session management\nMulti-tenant architectures\nCloud-native systems\n\nPreferred Qualifications\nExperience in SaaS / multi-tenant platforms\nFamiliarity with:Bug bounty programs\nRed teaming\nSecurity automation frameworks\n\nKnowledge of:AWS\nIdentity systems and federation (SSO, MFA)\n\nBackground in software engineering (ability to read/write code)\nAltium Limited, a part of the Renesas Group and headquartered in San Diego, California, is a global software company accelerating the pace of electronics innovation. We are redefining electronic product creation in a software-defined world with our industry-first cloud-based platform that unites every stakeholder and phase of electronics development.\nFrom startups to world’s technology giants, our digital platforms give more power to PCB designers, supply chain, and manufacturing, letting them collaborate as never before. At Altium, our teams are empowered to innovate, collaborate globally, and help create the future of electronics development.\nWe believe in rewarding our employees with a competitive benefits package alongside their salary. More information will be provided during the hiring process.","description_format":"text","description_chars":4391,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Processors, MCUs & AI Chips","Automotive Components","Analog & Power Semiconductors"],"lifecycle":[{"event":"open","at":"2026-08-25T10:49:09Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.529,"p_room":0.28,"age_days":69,"expected_fill_days":31,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/renesas-electronics-staff-product-security-engineer-6","json_url":"https://alion.io/job/renesas-electronics-staff-product-security-engineer-6.json","meta":{"generated_at":"2026-11-04T03:00:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4589,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3481},"rest":"https://alion.io/mcp/rest/get_company?id=3481"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frenesas-electronics-staff-product-security-engineer-6"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frenesas-electronics-staff-product-security-engineer-6"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frenesas-electronics-staff-product-security-engineer-6"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/renesas-electronics-staff-product-security-engineer-6\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frenesas-electronics-staff-product-security-engineer-6"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":121562}},{"tool":"search_jobs","arguments":{"company":"renesas.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":121562},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}