Senior Security Engineer, Product Security

For our client, we are seeking a Senior Security Engineer, Product Security to join the team of a leader in the Finance & Insurance space. This role will focus on protecting product and platform security across modern application stacks, with a particular emphasis on backend services, APIs, and AI/LLM-enabled features. The engineer will partner closely with product, engineering, and security teams to identify vulnerabilities early, validate real-world exploitability, and strengthen the security posture of customer-facing systems. The work will blend hands-on technical testing, security automation, and practical guidance that helps teams deliver secure software at scale. Location: Remote - US based candidates only, no visa sponsorship available Compensation: $146,000 – $185,000 annually Responsibilities Adversarially test AI and LLM-backed features to identify vulnerabilities and establish pass/fail criteria. Build and maintain production security services using appropriate technologies such as TypeScript and .NET. Automate repetitive security processes by identifying manual tasks that can be improved through technology. Review and triage pull requests for security vulnerabilities, ensuring real threats are prioritized. Conduct threat modeling from product designs to identify potential security risks early in the development process. Perform manual testing for web applications and APIs, ensuring exploitability of findings is validated through retesting. Manage and optimize AppSec tooling for low-friction and high-usability adoption across teams. Qualifications 5+ years of backend software engineering experience across modern languages like TypeScript, Node.js, .NET, and Python. Proficient in reading and analyzing code across multiple languages and stacks to identify vulnerabilities. Strong understanding of identity, authorization failures, and common security pitfalls. Experience with API security standards like REST and GraphQL, including input validation and gateway-level authentication. Hands-on experience with manual testing of web applications and APIs, including threat modeling and clear documentation of findings. Demonstrated ability to manage AWS and infrastructure-as-code solutions, including IAM and secrets management. Practical knowledge of AI/LLM security, including experience testing LLM-backed applications or agents. Benefits Flexible work environment with options for remote work. Access to professional development resources and training opportunities. Collaborative team culture focused on innovation and learning. Comprehensive healthcare and wellness programs. 401(k) retirement saving plan with employer matching. Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.