Product Security Specialist II

About the role

Safe Software is looking for a Product Security Specialist II to help shape and expand its product security program. The role blends hands‑on technical work with stakeholder communication, covering everything from secure development practices to AI governance and customer security engagements.

Key responsibilities

• Develop and maintain security policies, risk registers and compliance monitoring across product security domains.
• Support the AI governance program for developers, including policy creation, risk monitoring and training.
• Conduct third‑party library and vendor component reviews, covering licensing and known risk signals.
• Manage the vulnerability disclosure process, including CVE registration, advisory drafting and post‑mortem analysis.
• Provide security coverage for non‑engineering apps and services such as public APIs, internal tools and AI agents.
• Engage with customers and partners on security questionnaires, assessments and meetings.

Required profile

• 3+ years of experience in product or application security.
• Strong technical understanding of common vulnerability classes and secure development practices.
• Ability to explain security concepts clearly to technical and non‑technical audiences.
• Analytical mindset with experience interpreting incomplete or noisy data.
• Degree in Computer Science, Cybersecurity, IT or equivalent practical experience.

Required skills

• Python for automation, tooling or analysis.
• Familiarity with OWASP Top 10, SAST, DAST and SCA tools.
• Experience with vulnerability disclosure processes and CVE registration.
• Knowledge of AI‑assisted development security considerations.

What we offer

• Flexible, remote‑friendly work arrangements.
• Annual learning budget and paid training programs.
• Extended health, dental and wellness benefits from day 1.
• 3 weeks of vacation plus 6 seasonal paid days off.
• Profit‑sharing, RRSP/TFSA matching and parental leave top‑up.