[Hiring] Senior Product Security Engineer @Atlassian

Role Description

The Product Security team plays a crucial role in ensuring the safety and security of Atlassian's products and services. We are seeking a Product Security Engineer who excels at collaborating with development teams to enhance the security of their products throughout the entire software development lifecycle.

Your role will involve enhancing our Product Security Program by:

• Providing technical guidance
• Promoting automation
• Reviewing designs

You will lead our security teams in equipping engineering partner teams with the latest tools, techniques, and methodologies to ensure that secure products are built by default. A strong ability to collaborate with colleagues is essential for understanding our current processes as they relate to our products, as well as for suggesting and implementing improvements to our Product's security posture.

Since we work closely with our product engineering teams, the ability to read and understand code is very important.

On your first day, we'll expect you to have:

• Demonstrated expertise and experience working in security-focused roles
• Experience with application security, especially web applications
• Experience coding in Java, Python, or Go, and at least one scripting language
• Experience providing SME knowledge and guidance to stakeholders and engineering functions
• Experience leading large-scale projects from start to finish and mentoring other security practitioners
• Experience in cloud security architecture and infrastructure (AWS, GCP, or Azure)
• Hands-on experience identifying and mitigating AI/LLM-specific risks (prompt injection, data leakage, model manipulation) during architectural reviews
• Comfortable utilizing AI agents and modern AI developer ecosystems for day-to-day software development and code contributions

What You'll Be Doing:

• Security Assessments & Threat Modelling: Work with engineering to run assessments and threat models for cloud-native and SaaS products.
• Secure Design Reviews: Review cloud application architectures to ensure secure-by-default controls are in place.
• Automation & Detection: Build and maintain automation for security controls and detection to reduce manual vulnerability work.
• Incident Response: Participate in cloud security investigations and drive remediation.
• Stakeholder Engagement: Communicate risks and solutions clearly to both technical and non-technical audiences to drive security adoption.
• Collaboration: Partner closely with engineers, share knowledge openly, and foster an inclusive team environment.
• Continuous Improvement: Identify and champion improvements to security processes, tooling, and documentation.

It's great, but not required if you have:

• An interest in making AI-assisted development safer and more reliable through automation, guardrails, monitoring, or evidence.
• Experience in building and integrating agentic AI systems for automated threat detection, triage, and security reviews.
• Published contributions to the security community
• Presentation experience at industry events
• Experience working with compliance, privacy, IT, networking or related functions

Qualifications

• Demonstrated expertise and experience working in security-focused roles
• Experience with application security, especially web applications
• Experience coding in Java, Python, or Go, and at least one scripting language
• Experience providing SME knowledge and guidance to stakeholders and engineering functions
• Experience leading large-scale projects from start to finish and mentoring other security practitioners
• Experience in cloud security architecture and infrastructure (AWS, GCP, or Azure)
• Hands-on experience identifying and mitigating AI/LLM-specific risks (prompt injection, data leakage, model manipulation) during architectural reviews
• Comfortable utilizing AI agents and modern AI developer ecosystems for day-to-day software development and code contributions

Requirements

• Security Assessments & Threat Modelling
• Secure Design Reviews
• Automation & Detection
• Incident Response
• Stakeholder Engagement
• Collaboration
• Continuous Improvement

Benefits

• A wide range of perks and benefits designed to support you and your family
• Health and wellbeing resources
• Paid volunteer days
• Competitive compensation programs