Sr Product Security Engineer
Core
Build and operate the modern security tooling pipeline and SDLC security infrastructure for engineering teams, integrating AI-powered automation to provide fast, reliable security feedback on every commit and release.
Role type
Senior IC product security engineer (DevSecOps/automation)
Builds
Automated security review workflows, CI/CD security integrations, and AI-driven code analysis tooling
Domain
Cybersecurity SaaS, Software Development Lifecycle (SDLC), Cloud Security
Required skills
Application security, DevSecOps, CI/CD pipeline architecture, SAST/DAST/SCA/secret scanning, AI/LLM-based code analysis, automation workflow design, container security, cloud security fundamentals
Preferred skills
GitHub Advanced Security at scale, Wiz CLI, policy-as-code frameworks, incident response support, developer enablement programs
Technologies
Claude Code Security, Codex Security, GitHub Advanced Security, Wiz CLI, CodeQL, Dependabot, Trivy, Snyk, AWS, Kubernetes, OPA/Rego, Kyverno
Responsibilities
Build and maintain the product security tooling pipeline integrated across the software development lifecycle; Design and operate automated product security review workflows with human-in-the-loop checkpoints; Ensure security tooling integrates cleanly into engineering workflows (GitHub PRs, CI/CD, IDE plugins); Leverage AI platforms to build automation that scales security engineering; Support product incident response and coordinate with engineering on emergency fixes; Partner with Security Testers, Architects, and TPMs to translate secure design standards into enforceable policies
Seniority
Senior, hands-on IC