Product Security Testing Engineer

Responsibilities

• Collaborate with engineers and leadership to identify security risks and recommend mitigations within the SDLC
• Perform secure code reviews, security testing, and vulnerability triage across various applications
• Analyze test results, draw conclusions, and develop targeted exploit examples
• Document root cause and risk analysis of findings professionally
• Champion product security testing processes and advocate for secure development practices
• Manage the configuration and continuous improvement of DAST and API security tools
• Develop functional security testing strategies for new and emerging product requirements
• Implement automation to improve existing security processes and tooling

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• 5+ years of experience in product security, penetration testing, and security automation
• Strong understanding of AWS infrastructure and cloud security principles
• In-depth knowledge of cybersecurity frameworks including NIST, OWASP, SANS, and PCI
• Experience with WebApp, API, and Infrastructure as Code (IaC) penetration testing
• Proficiency with Dynamic Application Security Testing (DAST) methodologies and tools
• Experience with CI/CD pipelines and shift-left security practices
• Strong analytical, problem-solving, and communication skills

Preferred Qualifications

• Relevant cybersecurity certifications such as CEH, CCSP, CISSP, or OSCP
• Exposure to testing analytical models and AI/ML security testing

Benefits

• Highly competitive compensation, benefits, and rewards programs
• Inclusive culture with employee resource groups and social events
• Engaging, people-first work environment that promotes work/life balance
• Opportunities for professional development and continuous learning

About the Company

FICO is a leading global analytics software company helping businesses in over 100 countries make better decisions. We specialize in big data analytics, artificial intelligence, and machine learning to drive success in industries such as credit scoring, fraud detection, and lending.