Product Security Specialist II

At Safe Software, the Product Security team co-owns product security domains with

Engineering across the full product lifecycle - from secure architecture and SDLC integration, to supply chain security, incident response, developer enablement, AI governance, metrics, and compliance. We define the standards and strategic direction; Engineering owns the technical execution. Our team fosters a collaborative, security-conscious culture that supports innovation without compromise.

• Stakeholder Enablement and Communication: Work directly with developers, product management, customer experience teams, customers, and partners - explaining security concepts for each audience, handling security questionnaires and assessments, and participating in customer and partner driven security meetings.
• Security Policy and Standards: Contribute to security policies across product security domains, help maintain the risk register, and support compliance monitoring to verify that policies are followed.
• Supply Chain Security: Conduct security and compliance reviews of third-party libraries and vendor components, including licensing and known risk signals.
• AI Security and Governance: Support Safe's AI governance program for developers by contributing to policies and standards for AI-assisted development, monitoring emerging
• AI security risks, and assisting with training and awareness across the Engineering organization.
• Vulnerability Disclosure: Support the product security vulnerability disclosure process, including CVE registration, security advisory drafting, and contributing to postmortems and lessons-learned reviews.
• Security for Non-Engineering Apps and Services: Own ongoing security coverage for apps and services developed outside of core Engineering, including publicly accessible services (e.g., websites and APIs), internal tools, IT-developed scripts, and AI agents built for internal use.
• Metrics and Reporting: Contribute to security KPI tracking, governance dashboards, and reporting for leadership and external stakeholders.

Qualifications, skills, and competencies

Safers come from a variety of backgrounds. That said, candidates most successful in this role typically have experience with the following:

Required skills

• 3+ years of experience in product security, application security, or a closely related cybersecurity role.
• A strong technical background in cybersecurity, including solid understanding of common vulnerability classes, secure development practices, and security tooling (e.g., OWASP Top 10, SAST, DAST, SCA).
• Demonstrated ability to communicate security concepts clearly to stakeholders of varying technical backgrounds - from developers to customers who may have no security expertise.
• Strong analytical skills and the ability to interpret noisy or incomplete data.
• Proficiency in Python for automation, tooling, or analysis.
• Experience with Agentic AI.
• A degree in Computer Science, Cybersecurity, Information Technology, or a related field - or equivalent practical experience.

• Familiarity with compliance frameworks such as SOC 2 or ISO 27001.
• Security certifications (e.g., CISSP, CISM, or similar).
• Familiarity with and/or experience using and supporting FME in production
• environments.

We have an immediate opening and are excited to find the right candidate to join our team. Safe Software is hiring a Product Security Specialist II to join our Product Security team, which sits within the Information Security group. The scope of the role is deliberately broad: you will help write and maintain security policies and documentation, contribute to the AI governance program for developers, support the vulnerability disclosure process, and ensure security coverage extends to apps and services built outside of core engineering.

Customer and partner engagement is a significant part of the work - including security questionnaires, assessments, and direct participation in customer and partner driven security meetings. This is an individual contributor role suited for someone who thrives across a variety of security domains, is comfortable owning their areas independently, and enjoys an environment where the security program is actively growing. The role is remote-friendly.

This position aligns with our Product Security Specialist II level on the individual contributor path. With demonstrated impact and initiative, you'll have opportunities to:

• Take ownership of specific security domains (e.g., incident response, developer enablement, compliance, etc).
• Progress into a senior product security role with broader scope and influence.

• Meaningful Work: Make a profound impact across our business, workplace and data integration product.
• A Supportive Environment: Feel empowered to share your ideas and implement them with high autonomy and team support.
• Social Responsibility: Become part of a team that finds meaningful ways to give back. Take paid time off to volunteer for one of our Safe-organized opportunities that align with our core community initiatives.
• Learning & Career Development: We believe in your continuous learning and growth. Take advantage of an annual learning budget and training programs paid for by Safe.
• Flexible Working Hours: Flexible and remote-friendly work arrangements to fit your lifestyle. Work when you want, and how you want to.
• Work-Life Balance: There's no place for burnout at Safe. Maintain a healthy balance of your personal and work life without splitting yourself in two. Enjoy 3 weeks of vacation to recharge, plus an additional paid 6 seasonal days off per year.
• Health & Wellness: Extended health, dental, health or lifestyle spending, and counseling benefits from day 1. That's right, no waiting period.
• Family is important: We are dedicated to supporting our employees through parenthood and offer a Parental Leave Top-Up Program for new parents through childbirth or adoption.
• Shared Success: Share in Safe's success with our bi-annual profit sharing and RRSP/TFSA matching program.
• An Accessible Commute: Regardless of your commute method, we're located close to public transit, and provide complimentary parking and bike storage for our team!

Safe Software transforms organizations with FME, the only All-Data Any-AI Enterprise Integration Platform connecting all your data, anywhere, at any velocity.

With over 30 years of expertise and 25,000+ enterprise customers across 125+ countries, we simplify your data journey, wherever it leads.

Founded in 1993, Safe is headquartered in Surrey, BC with over 300 team members and counting. We’re always looking for talented individuals with diverse backgrounds who are determined to learn and grow. Are you ready to join the team?