Senior Product Security Engineer (USA Only, 100% Remote)

About this role

📋 Description Build a recurring product security review program. Threat model new features, audit high-risk Improve application security testing. Combine static analysis, dependency and secrets scanning Own vulnerability intake and remediation. Triage findings from HackerOne, scanners, penetration Turn security alerts into useful engineering work. Verify scanner coverage and automate ingestion Make dependency remediation safer and less manual.

Improve scanning across our Python and Make secrets routinely rotatable. Partner with service owners and Infrastructure to inventory 🎯 Requirements An application security engineer who writes code. You can move from reading an unfamiliar code Skilled at finding vulnerabilities conventional scanners may miss. You use modern AI-assisted Offensive-minded and operationally responsible. You know how to test like an attacker without being An automation builder.

You have worked with some mix of SAST, DAST, software composition analysis AI-native and accountable. You use coding agents and LLMs to accelerate investigation, code review Able to separate severity from priority. A score is an input, not a forgone conclusion. You 🎁 Benefits Compensation: Competitive pay plus an organization-wide goal-based bonus Paid Time Off: ~5 weeks of PTO to start. Plus a 1-week all-company Winter Holiday Break and paid US 80% Work Option: Work with your manager to choose between a standard 5-day week or a 4-day week at Parental Leave: Paid leave for primary and secondary caregivers Sabbatical: A 1-month paid sabbatical every 5 years with the team Healthcare (US residents): Two medical plans with Close covering 99% of your premium, plus Dental

Source listing: empllo_remote