Product Security Operations Analyst

As our Product Security Operations Analyst, you will strengthen the security of our product and engineering ecosystem. In this role, you will collaborate with engineering teams to develop and implement security best practices, policies, and procedures. You will drive security initiatives from concept to completion, ensuring a strong security posture across our products and processes.Success in this role requires a deep understanding of modern cloud-based product ecosystems, strong communication skills, and the ability to work cross-functionally. Most importantly, you will bring your skills and experience to help further our mission of helping people experience the Bible as a unified story that leads to Jesus. Core ResponsibilitiesLeadershipAdvocate security best practices through every step of the development lifecycle and engineering environment.Guide the engineering team in evaluating risks as it relates to our data, infrastructure, and code. ResponsibilityLead security initiatives from concept to completion in collaboration with cross-functional squads.Assess and prioritize vulnerabilities, equipping developers with the guidance and resources to remediate effectively.Develop and document security policies and procedures, with a focus on clarity and practical value.Support all org-wide security initiatives.ExpertiseVulnerability Management: Demonstrate knowledge of vulnerability prioritization and remediation strategies.Incident Response: Investigate and resolve security incidents, in collaboration with engineering teams, focusing on minimizing impact and preventing future incidents.Security Alerting: Design, implement, and configure security monitoring capabilities to generate meaningful security alertsCloud Configuration: Partner with DevOps to shape and secure our cloud and development environment.Proactive Security Review: Drive alignment with engineering to evaluate new features and services during the planning phase, embedding security into design decisions.What We Are Looking For4+ years experience in a Cybersecurity role, with a focus on product security/application security/DevSecOps.Broad experience using security/monitoring tools (e.g., Vulnerability, SAST/DAST, and Monitoring Tools)Competence using, managing, and configuring cloud security features for AWS or GCP.Knowledge of risk assessment methodologies, threat modeling practices, and industry standard frameworks (e.g., OWASP Top 10, NIST-CSF, etc.).Ability to communicate complex information effectively and in an engaging manner, leading to action.Ability to lead with empathy, guiding teams toward a stronger security posture by fostering collaboration, trust, and shared responsibility.Nice to have:Experience leveraging APIs for automation (ideally with Python).Experience leading product/application security training.About BibleProjectPortland, Oregon, Founded in 2014BibleProject is a nonprofit, crowdfunded organization that produces 100% free Bible videos, podcasts, blogs, classes, and educational resources. Our mission is to help people experience the Bible as a unified story that leads to Jesus.We have grown significantly in the area of multimedia technology. What began with two animated videos now encompasses multiple platforms and products—including over 160 videos. Our website and app serve as connection hubs to our ever-growing library of resources. Classroom, our online learning platform, offers accessible, graduate-level Bible classes.These, and all of our supporting products, continue to be completely free to audiences worldwide, thanks to the generosity of our patrons.Location: This role must be performed within the United States. Occasional travel to Portland, Oregon.Reporting to: Bradley Mumme, Security Program ManagerCompensation & BenefitsThe annual salary range for this role is $100,000 - $135,000.Competitive salary that scales with experience directly related to this role.Medical, dental, vision, life, short- and long-term disability insurance for employees and families, with premiums covered 100% by BibleProject.401(k) with 4% employer match.Flexible PTO.4 weeks of org-wide synchronized rest breaks.Paid parental leave.Paid learning stipend.Home Office resources as needed.A culture focused on belonging and thriving.BibleProject is an equal opportunity employer.Benefits401(k)Remote WorkMedical InsuranceVision InsuranceDental InsurancePaid Time Off401(k) MatchingCompany RetreatsLearning BudgetHome Office BudgetParental LeaveLife InsuranceHealth Savings Account (HSA)