Senior Product Security Engineer (USA Only, 100% Remote)

📋 Description

• Build a recurring product security review program. Threat model new features, audit high-risk
• Improve application security testing. Combine static analysis, dependency and secrets scanning
• Own vulnerability intake and remediation. Triage findings from HackerOne, scanners, penetration
• Turn security alerts into useful engineering work. Verify scanner coverage and automate ingestion
• Make dependency remediation safer and less manual. Improve scanning across our Python and
• Make secrets routinely rotatable. Partner with service owners and Infrastructure to inventory

🎯 Requirements

• An application security engineer who writes code. You can move from reading an unfamiliar code
• Skilled at finding vulnerabilities conventional scanners may miss. You use modern AI-assisted
• Offensive-minded and operationally responsible. You know how to test like an attacker without being
• An automation builder. You have worked with some mix of SAST, DAST, software composition analysis
• AI-native and accountable. You use coding agents and LLMs to accelerate investigation, code review
• Able to separate severity from priority. A score is an input, not a forgone conclusion. You

🎁 Benefits

• Compensation: Competitive pay plus an organization-wide goal-based bonus
• Paid Time Off: ~5 weeks of PTO to start. Plus a 1-week all-company Winter Holiday Break and paid US
• 80% Work Option: Work with your manager to choose between a standard 5-day week or a 4-day week at
• Parental Leave: Paid leave for primary and secondary caregivers
• Sabbatical: A 1-month paid sabbatical every 5 years with the team
• Healthcare (US residents): Two medical plans with Close covering 99% of your premium, plus Dental