Product Security Engineer

About the role

The Product Security Engineer will partner with Engineering and Product teams to build security into the products and services delivered to customers. Key responsibilities include:

• Assessing new products and technologies, leading threat modeling and security design reviews
• Identifying and validating vulnerabilities, prioritizing actual risks
• Implementing practical fixes before issues reach production
• Improving security tooling across the development lifecycle, including SAST, DAST, dependency scanning, and secret scanning
• Tuning security tools and workflows to provide useful findings to engineers
• Building automation to keep up with growing products, engineering teams, and use of AI
• Leading the response to product security issues, from investigation to remediation

Requirements

This is a hands-on role for someone who understands modern application design and building. Key requirements include:

• Experience in product security, application security, software engineering, penetration testing, or a related field
• Ability to threat model, review architecture, and assess applications without relying solely on checklists
• Comfort working across APIs, cloud services, containers, serverless technologies, and CI/CD pipelines
• Experience with tools such as SAST, DAST, dependency scanning, secret scanning, or infrastructure-as-code scanning
• Proficiency in reading and writing code, and ability to automate repetitive security work using Python, JavaScript, or a similar language
• Strong judgment and ability to balance security, customer impact, engineering effort, and business priorities
• Clear communication and ability to build credibility with both technical and non-technical teams

Qualifications

Preferred qualifications include:

• Experience securing AI-enabled products, agents, large language model applications, or MCP integrations
• Experience applying frameworks such as the OWASP Top 10, OWASP MCP Top 10, OWASP ASVS, or NIST in real-world environments
• Experience working across multiple products and engineering teams in an environment where priorities move quickly and no two days look exactly the same