Senior Product Security Engineer
Core
Build a recurring product security review program covering threat modeling, code review, and vulnerability remediation while automating security testing and tooling.
Role type
Senior IC application security engineer
Builds
Production-quality security fixes, automated vulnerability management workflows, and secure product features
Domain
Software security / Application security
Required skills
Application security engineering, Python, TypeScript, threat modeling, white-box code review, SAST/DAST/SCA/container/cloud security tooling, exploit reproduction, business logic flaw identification
Preferred skills
Experience with coding agents and LLMs for security investigation, fluency across backend and frontend systems
Technologies
Python, TypeScript, SAST, DAST, SCA, container scanning, secrets scanning, cloud posture tooling, Vault, AWS
Responsibilities
Build recurring product security review programs, own vulnerability intake and remediation from bug bounty reports and scanners, automate security alert ingestion and prioritization, partner with Infrastructure on secrets inventory and rotation, support security audits and incident investigation, collaborate with engineers and external researchers
Seniority
Senior, hands-on IC
