Senior Product Security Engineer (USA Only, 100% Remote)
Core
First dedicated Product Security Engineer building systematic security across a Python/TypeScript CRM backend, frontend, APIs, and AWS infrastructure.
Role type
Senior IC application security engineer (product & infrastructure)
Builds
Production-quality security fixes, automated vulnerability management pipelines, and a recurring product security review program.
Domain
SaaS CRM, Cloud Security, Application Security
Required skills
Application security engineering, Python, TypeScript, Threat modeling, Vulnerability triage, Security automation, Cloud security, API security, Code review
Preferred skills
AI-assisted security review, Bug bounty program leadership, SAST/DAST tuning
Technologies
Python, TypeScript, React, Flask, FastAPI, AWS, Kubernetes, Docker, Terraform, Ansible, MongoDB, PostgreSQL, Elasticsearch, Redis, HackerOne
Responsibilities
Threat model new features and audit high-risk areas; Triage and remediate vulnerabilities from scanners, audits, and bug bounty programs; Build and tune security automation tools (SAST, DAST, secrets scanning); Partner with engineering on cloud security and access controls; Lead technical aspects of the bug bounty program.
Seniority
Senior, hands-on IC
