Senior Security Engineer - Product Security
Core
Lead product security initiatives by integrating security into the SDLC, conducting risk assessments, and performing penetration testing for mobile, web, API, and IoT applications.
Role type
Senior IC product security engineer (application & AI/LLM security)
Builds
Secure software applications and integrated DevSecOps pipelines
Domain
Cybersecurity, Application Security, AI/LLM Security
Deliverable
production ML models | product features
Required skills
Application security, Penetration testing, Secure code reviews, AI/LLM security, Threat modeling, CI/CD integration, Vulnerability assessment, Secure architecture design, API security, Secrets management
Preferred skills
Multi-cloud security, Container security, Infrastructure as Code security, Prompt injection mitigation, Data poisoning prevention
Technologies
Python, JavaScript/TypeScript, Java, C#, Apex, SAST, DAST, WAF (Fastly, Cloudflare, Akamai), Snyk, Qualys, Burp Suite, Wiz, Postman, MobSF, Elastic, Agentic Scanner, Azure, AWS, GCP, ADO, GitHub
Responsibilities
Conduct Product Security Risk Assessments for Mobile, Web, API, and IoT applications; Perform and remediate findings from SAST, DAST, and manual penetration testing; Simulate attacks and generate detailed vulnerability reports; Review software applications for potential security flaws; Guide engineering teams on secure development practices and remediation strategies; Perform secure source code reviews and recommend mitigation strategies; Act as a technical liaison for CI/CD and DevSecOps integration; Automate security processes and integrate them into development pipelines; Stay updated on emerging threats, vulnerabilities, and countermeasures.
Seniority
Senior, hands-on IC
