Staff Product Security Engineer-Remote EAST COAST ONLY

About the Company

We are seeking an experienced Staff Product Security Engineer to help build security into products and engineering processes from the ground up. This is a highly technical role for someone who enjoys working directly with engineering teams, identifying security risks, and developing scalable solutions rather than simply finding vulnerabilities.

About the Role

Lead application and product security initiatives across the SDLC.

Responsibilities

• Perform threat modeling, architecture reviews, and security assessments
• Identify and help remediate vulnerabilities across web applications, APIs, cloud environments, and services
• Improve SAST, DAST, SCA, and other automated security testing within CI/CD pipelines
• Partner directly with developers to design secure solutions and improve secure coding practices
• Conduct hands-on security testing and code reviews
• Help establish security standards, tooling, and automation
• Evaluate emerging security risks, including those related to AI/LLM technologies

Qualifications

• 8+ years of Application/Product Security Engineering experience

Required Skills

• Strong background in application security, threat modeling, penetration testing, and secure architecture
• Hands-on experience with SAST, DAST, SCA, CI/CD security, and vulnerability management
• Strong understanding of OWASP and modern application security threats
• Ability to review and understand production code; experience with languages such as Python, Java, TypeScript, or Go
• Experience working closely with software engineering teams on vulnerability remediation
• Cloud and modern infrastructure security experience
• AI/LLM security experience is highly desirable

Preferred Skills

This is an opportunity to take significant ownership of product security while working alongside experienced engineering and security teams in a modern, fast-moving technology environment.

Remote EAST COAST ONLY