Product Security Engineer
Core
Embed security into the software development lifecycle, partner with R&D as an enabler, and build programs, tooling, and culture to make security a first-class part of how the company builds.
Role type
Senior Product Security Engineer
Builds
Security tooling (SAST, DAST, SCA, secrets scanning), security guardrails, secure coding guidelines, and CI/CD pipeline security gates.
Domain
Identity security, cloud-native security, AI/ML security
Deliverable
production ML models
Required skills
Threat modeling, SAST/DAST/SCA tooling, cryptography fundamentals, OAuth 2.0/OIDC/SAML/JWT, cloud-native security (AWS/Azure), CI/CD pipeline security, Python/Bash scripting, AI coding tools
Preferred skills
CVE research, bug bounty hunting, offensive security (OSCP/CTF), identity protocol depth, AI/ML feature security
Technologies
Semgrep, Checkmarx, Burp Suite, OWASP ZAP, Snyk, Dependabot, Black Duck, Terraform, Vault, AWS Secrets Manager, Claude, ChatGPT, Copilot, Cursor
Responsibilities
Lead threat modeling across products and architecture; own product security tooling end-to-end; run security code and design reviews; partner with R&D to secure AI/ML features; build security guardrails and secure coding guidelines; own vulnerability intake and CVE handling; launch and run the bug bounty program; drive supply chain and CI/CD security
Seniority
Senior, hands-on IC
