Product Security Analyst

How You'll Make An Impact

You will join the Cyber Security Engineering job family, focusing on embedding security into the entire Software Development Lifecycle (SDLC) for Boomi's product suite. You will collaborate closely with development and QA teams to perform threat modeling, conduct security assessments, and manage vulnerability remediation efforts. Your primary goal is to ensure that Boomi's award-winning technology maintains the highest standards of security, reducing product risk before deployment.

Role Responsibilities:

• Focus on embedding security into the entire Software Development Lifecycle (SDLC) to reduce product risk before deployment.
• Collaborate with development and QA teams to perform threat modeling, security assessments, and manage vulnerability remediation efforts.
• Work collaboratively to integrate security controls into CI/CD pipelines, supporting the team's goal of maintaining high security standards for Boomi’s product suite.
• Translate complex compliance requirements (such as SOC, FedRAMP, and ISO) into specific technical implementation details for cloud and on-premises systems.
• Serve as a technical bridge between security, engineering, and product teams to ensure cohesive security implementation.
  
  

Requirements:

• Several years of experience in product security, application security, or a similar role.
• Proficiency with application security testing tools (SAST, DAST, IAST) and vulnerability management.
• Experience performing manual and automated code reviews in common languages (e.g., Java, Python, JavaScript).
• Strong understanding of the OWASP Top 10, common application security vulnerabilities, and defensive coding practices.

Preferred Education:

• Bachelor’s Degree in Computer Science or a related technical discipline.
• CISSP or similar product security certifications.

Preferred Requirements:

• Experience with security in CI/CD pipelines (DevSecOps).
  

#LI-DF