Staff Product Security Engineer

Start free →

Or apply yourself on the official page →

About the role

The Opportunity At Adobe, securing the future of creativity is our mission. Our customers rely on our products every day to transform ideas into reality, and Adobe's security organization has built world-class security capabilities to protect that trust. The challenge is ensuring that expertise continuously develops the products and platforms our customers depend on. We seek a Staff Product Security Engineer to act as a Security Partner for our most valuable products. In this position, you will develop deep product and business insight. You will analyze signals from the security ecosystem and focus them into a few clear priorities. You will convert security capabilities into practical guidance that product and engineering teams can follow. You will operate with significant autonomy, own the security narrative for your portfolio end to end, and grow your influence across the Security organization and the product teams you partner with. This is an outstanding chance to create a meaningful impact! What you'll Do • Serve as the single point of contact for a portfolio of Adobe's most complex and highest-value products, owning evaluation and communication of the product's security posture. • Build and maintain deep context on each product's architecture, roadmap, and business drivers. Partner with your Technical Security Portfolio Manager (TSPM) to track assets, ownership, and open findings. Stay focused on the highest-leverage decisions! • Lead security design reviews and threat modeling for major releases, platform-level development, and new products or services, identifying, analyzing, and prioritizing security gaps across architecture, trust boundaries, data flows, and threat actor behavior. • Synthesize security signals, including threat models, vulnerability findings, and customer-identified concerns, into a curated set of top security priorities per product. • Direct the security activities needed for a successful release. These include threat modeling, penetration testing, vulnerability remediation, and paved-road onboarding. Integrate security into the existing release readiness process instead of treating it as a final gate. • Identify systemic risk patterns across your portfolio, build mitigations, paved roads, and reusable security frameworks that address whole classes of risk at scale. • Provide technical leadership and mentor engineers on your team. Share knowledge beyond your portfolio through tech talks, blogs, white papers, and conferences. • Contribute to the Security organization's roadmap through research and proof-of-concepts, and share expertise on emerging threats in AI/ML and agentic systems. What you need to succeed • 10+ years in Application or Product Security and a Bachelor’s degree or equivalent experience in Computer Science, Engineering, Cybersecurity, or a related field. • A demonstrable history of building end-to-end security solutions that were adopted across multiple engineering teams, and of translating product context into prioritized, actionable security guidance. • Proven ability to threat model complex, distributed, and AI/ML systems, and to make and defend risk-based decisions under uncertainty. • Solid knowledge of application architectures, cloud infrastructure (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), and secure SDLC practices. • Broad knowledge of vulnerability classes (OWASP Top 10, SANS) and authentication mechanisms (SAML, OAuth/OIDC, zero-trust). • A background in security code review across multiple languages and stacks. • Hands-on experience with standard security tooling (Burp Suite, Kali Linux) and the ability to build or customize tools when needed. • A track record of external technical communication, alongside clear and confident communic

View the official posting →