🛠 Tech Stack

💼 About This Role

You'll act as the tech lead for high-priority product security initiatives at Navan, integrating security into the SDLC and developing custom automated solutions. Your work will directly protect customer-facing products and internal tools from vulnerabilities. This role offers a chance to build and scale the product security function in a collaborative environment.

🎯 What You'll Do

• Lead threat modeling and architecture reviews for complex applications.
• Design and develop security tools and automation for development teams.
• Perform penetration testing on applications, cloud, and mobile environments.
• Provide security training and guidance to engineering teams.

📋 Requirements

• 6-8 years of Technical Product Security experience.
• Proven experience in threat modeling and architecture reviews.
• Proven experience with application, cloud, and mobile penetration testing in high-risk environments.
• Deep knowledge of cloud operational models and secure SaaS architecture.

✨ Nice to Have

• Published contributions to the security community.
• Deep understanding of browser security and modern JavaScript frameworks.
• Knowledge of compliance requirements for PCI DSS, SOC2, HIPAA, and FedRAMP.

🎁 Benefits & Perks

• 💰 Competitive compensation with base salary and target incentive.
• 🏖️ Flexible PTO
• 📚 Learning and development opportunities
• 🩺 Health, dental, and vision insurance
• 🏢 Office perks in NYC

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Phone Screen· 30 min
2. 2Technical Interview· 60 min
3. 3Hiring Manager Interview· 45 min