{"schemaVersion":"jobsearcher.job.v1","id":"d5fac9365ed3530a8f32f736","url":"https://jobsearcher.com/jobs/d5fac9365ed3530a8f32f736","canonicalUrl":"https://jobsearcher.com/jobs/d5fac9365ed3530a8f32f736","title":"Staff Product Security Engineer","description":"The Staff Product Security Engineer will be responsible for securing Navan products, by identifying risks early in the SDLC and developing application security tooling & processes to promote a 'shift left' security culture. You will be responsible for defining and scaling the product security function by integrating security in the application development process, conducting security-related research and assessments, developing custom automated security and anti-fraud solutions, and providing security analysis/design/training to the organization.\nReporting to the Director of Product Security and Security Engineering, you will lead the building and scaling of an application security program. This position requires advanced technical leadership, strong communication skills, and the ability to influence people at all levels of the organization. You will be responsible for ensuring the continuous security of Navan customer-facing products and internal tools. You will focus on proactively discovering security vulnerabilities, driving and advising risk remediation based on research, and developing strong strategic partnerships with engineering and product leadership to accelerate the release of software with security by design.\nWhat You'll Do\nServe as the primary architectural lead for high-priority product security initiatives, ensuring the strategic alignment and timely delivery of impactful programs.\nBe a key advisor to the overall strategy and roadmap of the Product Security Program.\nDrive the expansion and maturation of the Navan S-SDLC program across the organization.\nReview product designs for security defects, perform threat modeling and recommend remediations.\nWork with engineers to identify the tradeoffs of different solutions and recommend the ideal design to meet security requirements.\nDesign and develop security tools and processes to be leveraged by development teams.\nWork closely with engineering to sustain processes and/or convert manual integrations to automated pipeline activities.\nLead the definition and development of custom Security as Code solutions.\nProvide training, guidance, and assistance to development teams early in the SSDLC.\nCultivate security ownership in the product teams.\nBring visibility to product/application vulnerabilities in a consistent manner to enable appropriate prioritization and remediation.\nHelp build the Red Team and PSIRT functions.\nWhat We're Looking For\nProven experience performing threat modeling and architecture reviews for complex applications.\nProven experience delivering critical org-wide product security initiatives.\nProven experience performing application, cloud and mobile penetration testing in high risk environments like financial or healthcare companies.\n8-10+ years of Technical Product Security experience with a proven track record of system-wide impact in SSDLC tooling, automation, and threat modeling/attack surface analysis.\nProven ability to mentor junior engineers and lead cross-functional initiatives in multifaceted and highly technical organizations.\nAbility to provide pragmatic security advice for web applications, mobile applications, and cloud software.\nExperience working in Agile development with experience in technologies such as:\nCloud environment (AWS, or similar)\nApplication security testing tools (SAST, DAST, IAST, SCA, or similar.)\nInfrastructure as code (Terraform, or similar)\nJava Spring Framework (3+ years), Hibernate or similar ORM technologies, JavaScript/CSS, and Angular\nContainers (Docker, Kubernetes, or similar)\nContinuous integration (Jenkins, Github Actions or similar)\nIntegration of Security testing tools into CI pipelines\nDefect tracking (Jira,or similar.)\nSource code management (GitHub, or similar.)\nIn-depth knowledge of common application & network protocols, cryptographic primitives, authentication & authorization protocols, and common security threats, such as attack techniques, evasive techniques, and preventative & defensive methods.\nDeep knowledge of cloud operational models and secure SaaS architecture in a containerized microservices world.","company":"Navan","rawCompany":"navan","city":"Millbrae","state":"CA","isRemote":false,"isActive":false,"createdAt":"2026-07-23T15:56:33.161Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"13-1199.07","title":"Security Management Specialists","slug":"security-management-specialists"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Staff Product Security Engineer","description":"The Staff Product Security Engineer will be responsible for securing Navan products, by identifying risks early in the SDLC and developing application security tooling & processes to promote a 'shift left' security culture. You will be responsible for defining and scaling the product security function by integrating security in the application development process, conducting security-related research and assessments, developing custom automated security and anti-fraud solutions, and providing security analysis/design/training to the organization.\nReporting to the Director of Product Security and Security Engineering, you will lead the building and scaling of an application security program. This position requires advanced technical leadership, strong communication skills, and the ability to influence people at all levels of the organization. You will be responsible for ensuring the continuous security of Navan customer-facing products and internal tools. You will focus on proactively discovering security vulnerabilities, driving and advising risk remediation based on research, and developing strong strategic partnerships with engineering and product leadership to accelerate the release of software with security by design.\nWhat You'll Do\nServe as the primary architectural lead for high-priority product security initiatives, ensuring the strategic alignment and timely delivery of impactful programs.\nBe a key advisor to the overall strategy and roadmap of the Product Security Program.\nDrive the expansion and maturation of the Navan S-SDLC program across the organization.\nReview product designs for security defects, perform threat modeling and recommend remediations.\nWork with engineers to identify the tradeoffs of different solutions and recommend the ideal design to meet security requirements.\nDesign and develop security tools and processes to be leveraged by development teams.\nWork closely with engineering to sustain processes and/or convert manual integrations to automated pipeline activities.\nLead the definition and development of custom Security as Code solutions.\nProvide training, guidance, and assistance to development teams early in the SSDLC.\nCultivate security ownership in the product teams.\nBring visibility to product/application vulnerabilities in a consistent manner to enable appropriate prioritization and remediation.\nHelp build the Red Team and PSIRT functions.\nWhat We're Looking For\nProven experience performing threat modeling and architecture reviews for complex applications.\nProven experience delivering critical org-wide product security initiatives.\nProven experience performing application, cloud and mobile penetration testing in high risk environments like financial or healthcare companies.\n8-10+ years of Technical Product Security experience with a proven track record of system-wide impact in SSDLC tooling, automation, and threat modeling/attack surface analysis.\nProven ability to mentor junior engineers and lead cross-functional initiatives in multifaceted and highly technical organizations.\nAbility to provide pragmatic security advice for web applications, mobile applications, and cloud software.\nExperience working in Agile development with experience in technologies such as:\nCloud environment (AWS, or similar)\nApplication security testing tools (SAST, DAST, IAST, SCA, or similar.)\nInfrastructure as code (Terraform, or similar)\nJava Spring Framework (3+ years), Hibernate or similar ORM technologies, JavaScript/CSS, and Angular\nContainers (Docker, Kubernetes, or similar)\nContinuous integration (Jenkins, Github Actions or similar)\nIntegration of Security testing tools into CI pipelines\nDefect tracking (Jira,or similar.)\nSource code management (GitHub, or similar.)\nIn-depth knowledge of common application & network protocols, cryptographic primitives, authentication & authorization protocols, and common security threats, such as attack techniques, evasive techniques, and preventative & defensive methods.\nDeep knowledge of cloud operational models and secure SaaS architecture in a containerized microservices world.","datePosted":"2026-07-23T15:56:33.161Z","dateModified":"2026-07-23T15:56:33.161Z","hiringOrganization":{"@type":"Organization","name":"Navan","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Millbrae","addressRegion":"CA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"d5fac9365ed3530a8f32f736"},"url":"https://jobsearcher.com/jobs/d5fac9365ed3530a8f32f736"}}