Application Product Security Engineer

Job Description

REQUIREMENTS

• 2–4 years of experience in application security, product security, or software engineering
• Solid grasp of common vulnerability classes (OWASP Top 10, authn/authz, injection, SSRF)
• Experience with threat modeling and secure design reviews
• Hands-on incident response experience
• Ability to read and write code (Python, TypeScript/JavaScript, Go, or similar)
• Strong communication and collaboration skills
• Comfort with ambiguity and shifting priorities

Preferred

• Prior security experience at a startup or small security team
• Cloud security experience (AWS, GCP, or Azure) and infrastructure-as-code familiarity
• Experience securing AI/LLM-powered products or working with sensitive financial data
• Familiarity with compliance frameworks (SOC 2, GDPR)
• Contributions to CTFs, bug bounty, or open-source security tools

RESPONSIBILITIES

• Partner with product and engineering teams during design and planning to identify risks early
• Lead threat modeling and secure design reviews for new products and architecture changes
• Perform security-focused code reviews and assist engineers with vulnerability remediation
• Build and maintain application security tooling (SAST, dependency scanning, secrets detection) in CI/CD
• Participate in incident response, including triage, investigation, and containment
• Triage findings from bug bounty reports, pen tests, and vulnerability scans
• Develop lightweight security guidance and paved-road patterns
• Handle customer security questionnaires and cloud/corporate security improvements

Are you interested in this position?

Apply by clicking on the “Apply Now” button below!

#CrossChannelJobs #JobSearch
#CareerOpportunities #HiringNow
#Employment #JobOpenings
#JobSeekers