Staff Product Security Engineer

What you'll do

• Drive product security strategy and embed security controls across the software development lifecycle, including AI SDLC.
• Lead architecture reviews, threat modeling, and initiatives for vulnerability reduction, security automation, and secure-by-default engineering.
• Translate security frameworks and assurance findings into durable, automated engineering controls; mentor Product Security Engineers.

What they ask for

• 7+ years of experience in software, product, application, or cloud security.
• Experience driving security programs from design through rollout, such as secure SDLC, vulnerability management, platform hardening, or security automation.
• Strong hands-on familiarity with containers, Kubernetes, public cloud, and associated security controls.
• Experience with security compliance frameworks and ability to automate security workflows in at least one language and integrate them into CI/CD.

Nice to have

• Experience designing or operating an AI SDLC, AI security program, or governance model for AI-assisted development.
• Background in software supply-chain security, red-teaming, offensive security, or security tooling.

Pay

$205,000 — $231,000 USD (base salary)

Tools

containers, Kubernetes, Go, Python, Shell, CI/CD, SOC 2, ISO 27001

AI focus

Establish policies, tooling, and guardrails for responsible AI use in engineering across design, coding, testing, review, deployment, and operations; address risks of AI-assisted development.