Product Security Engineer

Role overview Help build and run a security program spanning cloud infrastructure, AI tools, data, applications, employee IT, and incident response. You’ll work with colleagues across technical and business functions to reduce risk while enabling teams to work efficiently. The role combines hands-on security engineering with roadmap ownership, automation, and practical guidance for product development.

Responsibilities - Harden cloud infrastructure and delivery pipelines, aiming for secure defaults that let developers deploy with confidence. - Establish safe, compliant access to AI tools and coding agents, including appropriate controls for how they operate. - Protect sensitive data and analytics systems while supporting appropriate access for employees and customers. - Build security into the software development lifecycle and advise on security requirements for product and AI platform changes. - Automate identity, access, and device controls, including onboarding and offboarding, just-in-time access, elevated permissions, and endpoint hardening. - Investigate potential incidents, develop environment-specific detections, and improve the quality of escalated alerts with a managed detection partner.

Requirements - Broad practical security experience across several areas such as cloud, application, data, AI, identity, endpoint, or incident response. - Experience building IAM workflows, including SSO, SAML, and just-in-time provisioning. - Experience securing cloud and CI/CD environments, including IAM configuration, security standards, posture management, and remediation. - Familiarity with vulnerability management across infrastructure, containers, third-party software, and application code. - Ability to automate security workflows, including endpoint controls for macOS or BYOD environments using an MDM. - Sound incident investigation and detection skills, plus enough engineering knowledge to review and guide AI-generated code. - Takes ownership, simplifies complex problems into practical steps, and works with employees to balance their needs with security.

Nice to have - Security experience at an early-stage company, familiarity with healthcare data and HIPAA, or experience preparing for SOC 2 audits.

Benefits and work setup - Compensation includes equity; benefits include medical, dental, and vision coverage for employees and dependents, flexible paid time off, paid parental leave, and a family-building stipend.