Product Security Engineer

The role

You will join the global Product Security team to test products for exploitable risk across web applications, APIs, containers, cloud environments, and AI-enabled features. You will work with engineering and product teams to remediate findings and contribute to secure design and development practices.

What you will do

• Perform hands-on security testing across web applications, APIs, containers, cloud environments and AI-enabled features.
• Prioritize findings by exploitability and business impact and track them through remediation.
• Contribute to threat modeling, secure design reviews and architecture discussions.
• Assess identity and access control weaknesses, authentication and authorization models, and cloud architectures.
• Test AI-enabled features and agentic workflows for prompt injection, tool misuse, and other failure modes.
• Partner with engineering and product teams to explain findings and review fixes.
• Strengthen security across the software delivery lifecycle.
• Document findings and recommendations and support triage of externally reported vulnerabilities.
• Research emerging attack techniques and AI-assisted testing tools.
• Share knowledge across the team to improve testing and secure product development.

Required qualifications

• Bachelor's degree in Computer Science, Information Security or a related field; equivalent practical experience accepted in place of formal education.
• 3+ years of experience performing penetration testing or application security.
• Experience testing across web applications, APIs, containerized deployments and multi-cloud environments (AWS, Azure, GCP), including embedded or agentic AI applications.
• Demonstrable expertise with tools such as Burp Suite, OWASP ZAP, Postman, Git, and Python or similar scripting languages.
• Strong understanding of the OWASP Top 10, the OWASP Top 10 for LLM Applications, SANS, and MITRE ATT&CK.
• Experience validating vulnerabilities through manual testing, distinguishing real, exploitable risk from raw scanner output.
• Familiarity with security risks in AI-enabled features — prompt injection, tool misuse, excessive agency, memory poisoning and insecure model integrations.
• Able to evaluate AI-generated content critically, verify technical accuracy, and use sound judgment.
• Demonstrated ability to identify security testing activities that can be automated with AI.
• Comfort configuring and tuning AI-assisted coding and testing tools (e.g., GitHub Copilot, Claude Code).

Nice to have

• Experience with threat modeling and secure design reviews.
• Familiarity with cloud security concepts and common risks in modern application environments.
• Experience testing APIs, desktop applications, or legacy and mainframe systems (IBM i, z).
• Relevant security certifications such as OSCP, PNPT, GPEN, GWAPT, CEH, or CompTIA Security+
• A background in software engineering

About the company

Precisely is a global leader in data quality, data enrichment, and location intelligence. It is an AI-first organization that helps brands make decisions with reliable data.