Join our Xplor Security team as a Product Security Engineering Lead to make a real impact on securing our products that serve everyday life verticals. We say that because we know that every conversation we have, every pipeline we build and every system we automate is another opportunity for us to elevate everyday life experiences for our customers and the people and communities they serve
Reporting into the Director of Product Security Engineering - as part of the overall Xplor Cyber Threat Intelligence, Engineering & Response function, you'll help us build, automate and integrate Product Security services across key business verticals and into our Xplor brands, whilst serving as a Security expert for Engineering, Product and wider Technology teams
Act as the primary product security engineer for key Xplor verticals with effective and frequent engagement with Engineering leadership and technical leads
Serve as the subject matter expert for the following Product Security domains
Automate and maintain a security design review program (design reviews, threat modeling, release readiness, exceptions) scaled to product maturity and roadmaps
Mobile security vulnerability identification, triage and remediations
API security vulnerability identification, triage and remediations
Product Security vulnerability management and reporting
Support product security incident readiness including SME Security knowledge, escalation, and alignment with incident response/SOC for product-driven issues
Build and manage AI-assisted tools effectively to automate Product Security workflows
Develop product security knowledge bases (such as threat models, DFDs, and Security patterns)
Help manage a vulnerability management lifecycle for product findings (triage, prioritization, assignment, remediation verification, closure)
Provide mentorship to team engineers, supporting the growth of their technical abilities and career progression
Collaborate with fellow Cyber teams to support activities that requires Product Security expertise and capacity
Cross-functional leadership, partner closely with
Product and Engineering Teams on roadmap alignment and customer commitments to ensure Security elements are balanced
Engineering management on Security delivery realities and investment trade-offs
Act as an escalation point when security, product, and delivery priorities conflict
Support Engineering teams and Security Champions, such as improving their understanding of Security best practices
For this position, you'll work fully remote. You need to be based in NZ and have full working rights for this region