Product Security Specialist II

Play a key role in shaping Safe Software's product security program - from strengthening security practices within the software development lifecycle and supporting the AI governance program that enables developers to safely maximize their use of AI tools, to working directly with customers and partners on their security needs. This role requires both a strong technical foundation in cybersecurity and the ability to communicate clearly with audiences ranging from engineers to customers and partners.

Detailed Description

We have an immediate opening and are excited to find the right candidate to join our team. Safe Software is hiring a Product Security Specialist II to join our Product Security team, which sits within the Information Security group. The scope of the role is deliberately broad: you will help write and maintain security policies and documentation, contribute to the AI governance program for developers, support the vulnerability disclosure process, and ensure security coverage extends to apps and services built outside of core engineering.

Customer and partner engagement is a significant part of the work - including security questionnaires, assessments, and direct participation in customer and partner driven security meetings. This is an individual contributor role suited for someone who thrives across a variety of security domains, is comfortable owning their areas independently, and enjoys an environment where the security program is actively growing. The role is remote-friendly.

About the Team

At Safe Software, the Product Security team co-owns product security domains with

Engineering across the full product lifecycle - from secure architecture and SDLC integration, to supply chain security, incident response, developer enablement, AI governance, metrics, and compliance. We define the standards and strategic direction; Engineering owns the technical execution. Our team fosters a collaborative, security-conscious culture that supports innovation without compromise.

What You'll Be Doing

As a Product Security Specialist II, you will:

• Stakeholder Enablement and Communication: Work directly with developers, product management, customer experience teams, customers, and partners - explaining security concepts for each audience, handling security questionnaires and assessments, and participating in customer and partner driven security meetings.

• Security Policy and Standards: Contribute to security policies across product security domains, help maintain the risk register, and support compliance monitoring to verify that policies are followed.

• Supply Chain Security: Conduct security and compliance reviews of third-party libraries and vendor components, including licensing and known risk signals.

• AI Security and Governance: Support Safe's AI governance program for developers by contributing to policies and standards for AI-assisted development, monitoring emerging

• AI security risks, and assisting with training and awareness across the Engineering organization.

• Vulnerability Disclosure: Support the product security vulnerability disclosure process, including CVE registration, security advisory drafting, and contributing to postmortems and lessons-learned reviews.

• Security for Non-Engineering Apps and Services: Own ongoing security coverage for apps and services developed outside of core Engineering, including publicly accessible services (e.g., websites and APIs), internal tools, IT-developed scripts, and AI agents built for internal use.

• Metrics and Reporting: Contribute to security KPI tracking, governance dashboards, and reporting for leadership and external stakeholders.

Qualifications, Skills, and Competencies

Safers come from a variety of backgrounds. That said, candidates most successful in this role typically have experience with the following:

Required Skills

• 3+ years of experience in product security, application security, or a closely related cybersecurity role.

• A strong technical background in cybersecurity, including solid understanding of common vulnerability classes, secure development practices, and security tooling (e.g., OWASP Top 10, SAST, DAST, SCA).

• Demonstrated ability to communicate security concepts clearly to stakeholders of varying technical backgrounds - from developers to customers who may have no security expertise.

• Strong analytical skills and the ability to interpret noisy or incomplete data.

• Proficiency in Python for automation, tooling, or analysis.

• Experience with Agentic AI.

• A degree in Computer Science, Cybersecurity, Information Technology, or a related field - or equivalent practical experience.

Nice to Have

• Familiarity with compliance frameworks such as SOC 2 or ISO 27001.

• Security certifications (e.g., CISSP, CISM, or similar).

• Familiarity with and/or experience using and supporting FME in production

• environments.

Career Growth

This position aligns with our Product Security Specialist II level on the individual contributor path. With demonstrated impact and initiative, you'll have opportunities to:

• Take ownership of specific security domains (e.g., incident response, developer enablement, compliance, etc).

• Progress into a senior product security role with broader scope and influence.

What You Can Expect

When you choose a career with Safe Software, you're also choosing…

• Meaningful Work: Make a profound impact across our business, workplace and data integration product.

• A Supportive Environment: Feel empowered to share your ideas and implement them with high autonomy and team support.

• Social Responsibility: Become part of a team that finds meaningful ways to give back. Take paid time off to volunteer for one of our Safe-organized opportunities that align with our core community initiatives.

• Learning & Career Development: We believe in your continuous learning and growth. Take advantage of an annual learning budget and training programs paid for by Safe.

• Flexible Working Hours: Flexible and remote-friendly work arrangements to fit your lifestyle. Work when you want, and how you want to.

• Work-Life Balance: There's no place for burnout at Safe. Maintain a healthy balance of your personal and work life without splitting yourself in two. Enjoy 3 weeks of vacation to recharge, plus an additional paid 6 seasonal days off per year.

• Health & Wellness: Extended health, dental, health or lifestyle spending, and counseling benefits from day 1. That's right, no waiting period.

• Family is important: We are dedicated to supporting our employees through parenthood and offer a Parental Leave Top-Up Program for new parents through childbirth or adoption.

• Shared Success: Share in Safe's success with our bi-annual profit sharing and RRSP/TFSA matching program.

• An Accessible Commute: Regardless of your commute method, we're located close to public transit, and provide complimentary parking and bike storage for our team!

About Safe Software

Safe Software transforms organizations with FME, the only All-Data Any-AI Enterprise Integration Platform connecting all your data, anywhere, at any velocity.

With over 30 years of expertise and 25,000+ enterprise customers across 125+ countries, we simplify your data journey, wherever it leads.

Founded in 1993, Safe is headquartered in Surrey, BC with over 300 team members and counting. We’re always looking for talented individuals with diverse backgrounds who are determined to learn and grow. Are you ready to join the team?

Our Commitment to Diversity and Inclusion

Safe Software is an equal opportunity employer and we truly believe that innovation and strength begin with diversity and inclusion.

We welcome all candidates regardless of race, gender identity or expression, sexual orientation, age, ability, disability, national or ethnic origin, political belief, religion, or family status.

Should you require accommodations during the recruitment process, please contact [email protected].

Notice Regarding Use of Automated Tools in Hiring

At Safe Software, we use automated tools to help us process applications and identify qualified candidates. These tools may assist in screening resumes and summarizing interview content based on the information you provide. This helps our team review applications efficiently while ensuring every candidate is considered based on the requirements of the role.

Please be assured that the final hiring decision is always made by a member of our team. For more information on how we protect your privacy, please see our policy. If you have questions about this process, please contact us at [email protected].