Product Security Engineer

📋 Description

• Lead threat modeling engagements on the features and services where the risk warrants it.
• Partner with the ProdSec lead to evolve the practice from on-request to repeatable, with clear
• Own day-to-day triage of CNAPP findings end to end. Investigate, prioritize, route to service
• Contribute to SDLC tooling, SAST/SCA workflows, and bug bounty triage as the team's work demands.
• Partner with product engineering teams as a trusted reviewer. Catch issues early, explain the why
• Bring AI to the work. Use it to accelerate triage, summarize findings, draft threat models, scan

🎯 Requirements

• 2 to 4 years of full-time experience in a security-focused role. AppSec, ProdSec, or cloud security
• Comfortable reading and critiquing pull requests in a modern stack. You don't need to ship
• Experience participating in or leading threat modeling exercises. Familiar with at least one
• Working knowledge of cloud security posture. Exposure to a CNAPP is a strong plus.
• Strong fundamentals: OWASP Top 10, authentication and authorization patterns, secrets management
• Hands-on experience applying AI tooling to security or engineering work. You can point to specific

🎁 Benefits

• Restricted Stock Units (RSUs)
• Health insurance
• Dental insurance
• Vision insurance
• Mental health benefits
• Salary range as listed