Senior Product Security Engineer

HireRight is the premier global background screening and workforce solutions provider. We bring clarity and confidence to vetting and hiring decisions through integrated, tailored solutions, driving a higher standard of accuracy in everything we do. Combining in-house talent, personalized services, and proprietary technology, we ensure the best candidate experience possible. PBSA accredited and based in Nashville, TN we offer expertise from our regional centers across 200 countries and territories in The Americas, Europe, Asia, and the Middle East. Our commitment to get it right every time, everywhere, makes us the trusted partner of businesses and organizations worldwide.

As a Senior Product Security Engineer, you will be a strategic partner to our development engineering and product teams, enabling them to build secure software products through collaboration, education, and hands-on support. While you’ll help lead the implementation and tuning of application security tooling (SCA, SAST, secrets detection, container scanning), your long-term impact will come from fostering a culture of secure development and integrating security into every phase of the SDLC. 

This role balances automation with thoughtful manual engagement - leveraging tools where they’re most effective, and applying targeted reviews such as threat modeling, secure code reviews, and architectural assessments where deeper insight is needed. You’ll use your expertise to guide remediation, influence engineering and architecture decisions, and ensure security is built in, not bolted on. 

Success in this role requires strong technical depth (significant development experience is a must), excellent communication skills, and the ability to work independently while mentoring others. You’ll thrive here if you’re proactive, resourceful, and passionate about enabling teams to build secure and resilient products. 

• Collaborate with product and engineering teams to integrate security controls at every stage of the software development life cycle. 

• Partner with developers to explain findings, guide remediation, and promote secure coding practices. 

• Conduct secure code reviews and participate in architectural discussions from a security standpoint. 

• Continue to foster a culture of security awareness, including the education and training of developers on secure coding practices. 

• Communicate effectively with technical and non-technical stakeholders about security concerns and best practices. 

• 5+ years of experience in product or application security. 
• Strong understanding of secure software development, DevSecOps, and threat modeling. 
• Prior experience as a software developer or working closely within a development team, with a strong understanding of engineering workflows and developer perspectives 
• Experience with Java, C++, .Net, React, Python a plus  
• Proficiency in secure code review and vulnerability triage. 
• Hands-on experience with AppSec tooling (SAST, SCA, secrets detection, container scanning). 
• Experience with cloud platforms (AWS, GCP, Azure) and developer SaaS tools (GitHub, Jira). 
• Excellent communication and influencing skills. 
• Ability to work independently, take initiative, and follow through on deliverables. 
• Experience mentoring others and leading technical projects. 
• Proven ability to lead cross-functional teams in a technical capacity, driving complex security initiatives or risk analyses across enterprise environments. 

In exchange for your expertise, HireRight offers an excellent employee benefit package which includes:

• Medical
• Dental
• Vision
• Paid Life/AD&D Insurance
• Voluntary Life Insurance
• Short- & Long-Term Disability
• Flexible Spending Accounts
• 401K
• Generous Vacation and Sick Program
• 10 Paid Holidays
• Education Assistance Program
• Business Casual Attire
• Generous Referral Program
• Employee Discounts and Rewards
• And much more!

*All resumes are held in confidence. Only candidates whose profiles closely match requirements will be contacted during this search.

HireRight, LLC is an Equal Opportunity Employer
Minorities / Females / Veterans / Disabilities

HireRight does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of HireRight and HireRight will not be obligated to pay a placement fee