Senior Product Security Engineer

Responsibilities

• Perform web application, API, thick-client, internal network, external network, and cloud-service penetration testing.
• Conduct threat modeling, source-code reviews, and triage of SAST, SCA, IAST, and DAST findings.
• Partner with engineering teams to prioritize and remediate vulnerabilities and integrate security best practices into development processes.
• Build repeatable penetration-testing methodologies and independently plan and execute security engagements.
• Develop a proactive product security roadmap informed by threat intelligence and emerging threats.
• Create intelligent, context-aware security guidance and automation using AI and MCP.
• Produce quality assessment reports, presentations, and operating procedures, and mentor junior teammates.
• Triage security incidents when needed and continue developing security expertise through relevant certifications and training.

Requirements

• 5+ years of relevant penetration testing, product security, and application security experience.
• 2+ years securing Java, Python, and/or JavaScript web applications.
• Strong working knowledge of at least two programming or scripting languages.
• Experience with advanced security tools, real-world attack simulation, cloud security assessments, and containerized cloud environments.
• Familiarity with OSSTMM, OWASP, SAMM, NIST Special Publications, and PTES.
• Experience testing against PCI, FISMA, HIPAA, FedRAMP, or HITRUST compliance frameworks.
• Experience with AI security tooling, context-aware SSDLC automation, AI privacy and governance, and collaborative agentic AI systems.
• Proficiency using AI tools such as Claude, Gemini, ChatGPT, or Copilot to solve business challenges and streamline workflows.
• Bachelor’s degree or equivalent certification and relevant experience; equivalent related working experience is accepted.
• Relevant security certifications such as OSCP, OSWE, or CRTP are strongly preferred.
• Experience with red/purple team operations and knowledge of Python, Java, and/or JavaScript software development are preferred.
• Familiarity with the EU AI Act, SAIF, and ISO 42001 is preferred.

Benefits

• Competitive health coverage and time off.
• Flexible benefits offerings designed to support employees and their loved ones through varied circumstances and life events.
• Flex Fund monthly stipend.
• Pension/401k plans.
• Bonus potential and equity for eligible roles.
• Equal opportunity workplace with accommodations available for applicants.