Product Security

What you'll do

• Conduct secure design reviews and threat modeling, and define prioritized mitigations and security requirements.
• Partner with product and engineering teams to implement security controls and shift-left practices across distributed systems and the development lifecycle.
• Triage and drive remediation of findings from penetration tests, red team exercises, and bug bounty programs.

What they ask for

• Knowledge of security risks affecting ML products, agent-based systems, and AI models and pipelines.
• Ability to develop threat models and partner with engineering teams to reduce security risk.
• Experience securing multi-cloud platforms and multi-tenant SaaS systems, including Kubernetes- and Docker-based environments.
• At least 3-5 years of experience in application, product, or security engineering, or a related technical security role.

Nice to have

• Hands-on experience exploiting AI/ML and GenAI security risks, including model poisoning, RAG data leakage, and runtime attack vectors.
• Experience supporting offensive security programs, or external presentations and/or open-source security projects or tools.

Pay

$117,200 - $176,700 annually (base salary, USD); $141,200 - $194,200 annually (base salary, USD)

Tools

Kubernetes, Docker

AI focus

Identify emerging threats in AI-driven and agent-based products and secure ML products, AI models, and pipelines; preferred work includes exploiting AI/ML and GenAI security risks such as model poisoning, RAG data leakage, and runtime attack vectors.