Senior/Staff Security Engineer - Product Security

What you'll do

• Own security outcomes for 2–4 production areas and implement controls such as least-privilege access, secure service trust, telemetry, and hardened CI/CD.
• Threat-model systems, lead vulnerability management, and strengthen incident response through playbooks, exercises, and verified remediation.
• Secure AI- and agent-assisted development and operations by defining usage patterns, implementing guardrails, and monitoring risky behavior.

What they ask for

• 8+ years building and operating security controls for large-scale production systems across application and cloud infrastructure.
• Hands-on ability to ship automation or tooling in Python, Go, or similar, and build integrations with AI tools and agentic security bots.
• Practical experience with cloud-native stacks and microservices, including Kubernetes, containers, IAM, CI/CD, secrets management, and logging/telemetry.
• Prior ownership of vulnerability management and incident response for production services; experience threat-modeling systems involving physical systems, regulated workflows, or third-party partners.

Nice to have

• Experience securing LLM/agentic tools and mitigating OWASP LLM risks.
• Experience across cloud infrastructure, web services, and embedded/autonomy, or building developer-friendly security platforms.

Tools

Python, Go, Kubernetes, CI/CD, IAM, KMS, OWASP LLM

AI focus

Secure AI- and agent-assisted development and operations by defining allowed tools and patterns, preventing secret exposure and unauthorized actions, monitoring risky agent behavior, and mitigating LLM risks.