Senior Product Security Engineer

What you'll do

• Build and operate scanners and guardrails across source control, CI/CD, package ecosystems, and developer platforms; improve detection and remediation.
• Tune security controls, investigate gaps and false positives, and write or review code, APIs, detection rules, and automation.
• Partner with engineering, platform, and security teams to improve integrations and evaluate security controls for new technical surfaces, including AI/LLM tools.

What they ask for

• 3+ years relevant experience and a Bachelor’s degree, or any equivalent combination of education and experience; the posting also specifies 3–5 years in relevant fields and a Bachelor’s degree or equivalent combination.
• Experience developing, integrating, or operating security automation in CI/CD or developer workflows, including one or more of SAST, SCA, secrets detection, or software supply chain security.
• Programming or scripting in multiple languages, such as Python, Go, and Bash, with ability to write, review, and troubleshoot code.
• Working knowledge of secure software development, common application vulnerabilities, dependency and package ecosystem risks, and practical remediation.

Nice to have

• Experience with SLSA, SBOMs, provenance, artifact signing or verification, package repositories, or dependency governance; or creating and tuning static-analysis, secrets-detection, or policy-as-code rules.
• Familiarity with AI/LLM security, GCP, Kubernetes, Terraform, Java, Javascript, or security-tooling telemetry and metrics.

Pay

Austin, Texas: ($130,500.00 - $193,600.00 Annually) USD base salary; Chicago, Illinois: ($130,500.00 - $193,600.00 Annually) USD base salary

Tools

SLSA, SBOMs, GCP, Kubernetes, Terraform, Java, Javascript, Python

AI focus

Evaluate AI/LLM tools and define appropriate security controls; familiarity with AI-assisted coding and model and tool supply chains is noted.