Software Engineer, Security. These are software engineers who specialise in security, building login systems, cloud and network protections, and the checks that keep code safe. In a security product company the role is not about guarding the company's own systems. It is about building security into the product that customers buy. The work splits four ways.

Most of these postings also require real programming in Python, Java or Go, and many require database skills, because security software engineers here write product code.

Java backend engineers. Behind most security products sits a large backend shared by many customers. Java engineers build it, whether it is an identity and certificate service, a vulnerability-management platform or privacy and compliance software. They are the most common opening in cybersecurity, in roughly the same proportion as across product companies, and the stack is Java and Spring Boot with Kafka, on AWS and Kubernetes.

Test engineers. A security product that fails lets an attacker in, so testing carries extra weight here, and testers are hired more often than at most product companies. Most of them test the products as software, automated in Java and Python with Playwright and Selenium. Some test network appliances and traffic handling on real equipment. Many postings also require security testing, meaning checks that the product itself resists attack.

Cloud and DevOps engineers. Many security products now run as cloud services that sit in the path of their customers' traffic, so they must never go down. That raises the demand for cloud and DevOps engineers above the level at most product companies. The postings require Python and Go as often as AWS, Kubernetes and Terraform, and many add security responsibilities.

C/C++ systems engineers on Linux. A firewall has to inspect every packet without slowing the network down. Writing that code is the work of C/C++ systems engineers, who are concentrated in network security. They build the packet-inspection path of firewalls and cloud gateways, VPN and proxy engines, and agents that run deep inside the operating system of laptops and servers. The postings require TCP/IP, NAT, DNS, HTTP, IPSec, DPDK and the Linux kernel.

Go backend engineers. Much of the newer security software is written in Go, including cloud gateway services, scanners that check how cloud accounts are configured, back ends for managing devices and certificate services. That makes Go engineers a distinctive group here, far more common than at a typical product company.

GenAI engineers. GenAI engineers build AI assistants inside security consoles, AI that sorts and prioritises alerts, and agents that investigate a threat, in Python on the major clouds. Their share of hiring is close to that at other product companies, and it is rising, as described below.

Frontend engineers. Analysts and administrators spend their day in security consoles, reading alerts and managing policies. Frontend engineers build those consoles, mostly in React, and they are hired in about the same proportion as elsewhere.

Rare here. Data engineering, .NET, mobile, SAP and ServiceNow each appear, but none is central to what cybersecurity companies build.