Senior Product Security Engineer

Responsibilities

• Architect and enforce security controls for AI/ML systems, including model training, data pipelines, inference environments, and agentic workflows.
• Identify and mitigate AI-specific threats including prompt injection, data poisoning, model inversion, and model theft.
• Implement model provenance, integrity, and auditability controls for secure AI operations.
• Embed security, privacy, and compliance throughout the software and AI development lifecycle.
• Define secure development standards, guidance, and best practices.
• Lead threat modeling, secure design reviews, risk assessments, security automation, and governance integration.
• Produce customer-facing security questionnaires, whitepapers, and trust collateral.
• Represent product security in customer, cross-functional, and leadership discussions.
• Mentor teams on secure coding, AI risk management, and secure design while promoting a security-first culture.

Requirements

• 5–7+ years of experience in product, application, or cloud security engineering.
• Deep understanding of secure SDLC, threat modeling, and secure architecture design.
• Ability to read and review code for threat modeling and design reviews.
• Experience securing AI/ML pipelines, data workflows, and model-serving infrastructure, including AI/LLM security concepts.
• Experience with cloud security across multi-cloud environments.
• Familiarity with DevSecOps and CI/CD environments.
• Understanding of encryption, TLS/mTLS, key management, secrets handling, authentication, and authorization patterns.
• Knowledge of OAuth 2.0, OIDC, SAML, RBAC, and ABAC.
• Ability to drive cross-functional security initiatives with engineering, product, and compliance teams.
• Preferred: proficiency in Python, Java, and/or JavaScript for security automation and tooling.
• Preferred: container and Kubernetes runtime security, software supply chain security, artifact integrity verification, and bug bounty program experience.
• Preferred: familiarity with SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF.
• Preferred: CKS, CISSP, CSSLP, or AI/ML security credentials.

Benefits

• Competitive compensation, benefits, performance-based bonus, equity, and career growth opportunities.
• Opportunity to shape product security strategy and work on AI security challenges in a collaborative engineering culture.