Senior Product Security Engineer

Role overview Lead product security across AI-enabled products, shaping how security is designed into systems from architecture and development through deployment and customer assurance. The work spans AI and machine learning risks, secure development practices, threat analysis, automation, and cross-functional guidance.

Responsibilities - Design and apply security controls for AI and machine learning systems, including data pipelines, model training and serving, and agent-based workflows. - Assess AI-specific threats such as prompt injection, data poisoning, model inversion, and model theft; establish controls for model provenance, integrity, and auditability. - Partner with product, engineering, architecture, and compliance teams to incorporate security, privacy, and compliance into product design and development. - Lead threat modeling, security design reviews, and risk assessments, and build security automation that fits development workflows. - Prepare customer assurance materials, including questionnaire responses and security documentation, and represent product security in stakeholder discussions. - Mentor engineering teams on secure design and coding, AI risk, and security practices through guidance and training.

Requirements - 5–7 or more years in product, application, or cloud security engineering. - Strong knowledge of secure software development, threat modeling, and secure architecture, with the ability to review code. - Experience securing AI or machine learning pipelines, data workflows, and model-serving infrastructure; working knowledge of LLM risks and model integrity. - Cloud security experience across multiple cloud environments, plus familiarity with DevSecOps and CI/CD. - Understanding of encryption, TLS or mutual TLS, key and secret management, and authentication and authorization patterns such as OAuth 2.0, OIDC, SAML, RBAC, and ABAC. - Ability to lead security initiatives across product, engineering, and compliance teams and influence technical plans.

Nice to have - Programming experience in Python, Java, or JavaScript for security tooling; Kubernetes security; software supply chain controls; or bug bounty program experience. - Familiarity with SOC 2, ISO 27001, NIST 800-53, NIST AI RMF, or relevant security certifications.

Benefits and work setup The position offers the chance to influence product security strategy in a collaborative security-focused engineering environment. Compensation is listed at $182,000–$228,000 USD, with potential performance bonus, equity, and benefits.