RemoteLeaf Logo
Log in Sign up

Staff Product Security Engineer

1 day, 4 hours ago
United States, Canada
Full-time
Lead
Application Security Engineer
Cybersecurity
AWS Azure CI/CD DevSecOps Encryption GCP Go Java JavaScript Kubernetes Microservices OpenID Connect Python SAML Secrets Management
Apply Now
Alphasense

Alphasense

Alphasense is a global leader in providing high-quality gas sensors and air quality monitors to industrial OEMs. With over 25 years of experience, the company offers a wide range of innovative gas sensor technologies for various applications, including...

Industrial Conglomerates
51-250
Founded 1996
View All Jobs 47

Description

  • Embed security practices throughout the software and AI development lifecycle.
  • Lead secure design reviews, threat modeling, and risk assessments for AI-driven products, APIs, and backend services.
  • Partner with engineering, product, governance, and compliance teams to build security, privacy, and compliance into product design.
  • Build and maintain security automation and governance frameworks for development workflows.
  • Architect and enforce security controls for AI/ML systems, including model training, data pipelines, and inference environments.
  • Identify and mitigate AI-specific attack vectors such as data poisoning, model inversion, prompt injection, and model theft.
  • Implement model provenance, integrity, and auditability controls for responsible AI operations.
  • Partner with DevOps and SRE teams to secure service meshes, container networking, and secrets management.
  • Drive software supply chain security, including artifact integrity, dependency management, and vulnerability reduction.
  • Define reference security architectures for microservices, APIs, and cloud-deployed AI systems.
  • Mentor teams on secure coding, containerization best practices, and AI risk management.
  • Represent product security in cross-functional and leadership discussions.

Requirements

  • 7+ years of experience in product or application security engineering.
  • Deep understanding of secure SDLC, threat modeling, and secure architecture design.
  • Proven expertise with AWS cloud security concepts and best practices.
  • Strong experience with container security, orchestration, and runtime protection.
  • Proficiency in Python, Java, and/or JavaScript for security automation, code review, and tooling.
  • Experience securing AI/ML pipelines, data workflows, or model-serving infrastructure.
  • Familiarity with DevSecOps and continuous integration/deployment environments.
  • Familiarity with encryption fundamentals, including symmetric and asymmetric cryptography, TLS/mTLS, key management, and secrets handling best practices.
  • Ability to drive cross-functional security initiatives with engineering, product, and legal stakeholders.
  • Experience with GCP or Azure cloud platforms (preferred).
  • Knowledge of AI and LLM security (preferred).
  • Experience with software supply chain security and artifact integrity verification (preferred).
  • Familiarity with compliance and governance frameworks such as SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF (preferred).
  • Understanding of authentication and authorization patterns including OAuth 2.0, OIDC, SAML, RBAC, and ABAC (preferred).
  • Certifications such as CKS, CISSP, CSSLP, or AI/ML-focused security credentials (preferred).

Benefits

  • Base salary range of $134,000 to $184,000 USD.
  • Performance-based bonus.
  • Equity.
  • Generous benefits program.
  • Competitive compensation.
  • Career growth opportunities.
  • Remote, USA location.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Wiz

Security Engineer - Product

Wiz 251-1K IT Services

Wiz is seeking a Security Engineer for Product & Production Infrastructure to secure its cloud-native products, CI/CD systems, and production environments while helping shape security controls across the company.

Netherlands Full-time Senior Application Security Engineer Security Engineer
AWS Azure CI/CD CloudFormation GCP Go Helm Kubernetes Pulumi Python Terraform
3 hours, 16 minutes ago
Wiz

Security Engineer - Product

Wiz 251-1K IT Services

Wiz is hiring a Security Engineer for Product & Production Infrastructure to secure its cloud-native products, CI/CD, and production environments across a fast-growing AI security platform.

France Full-time Senior Application Security Engineer
AWS Azure CloudFormation GCP Go Helm Kubernetes Pulumi Python Terraform
3 hours, 16 minutes ago
Wiz

Security Engineer - Product

Wiz 251-1K IT Services

Wiz is hiring a Security Engineer for Product & Production Infrastructure to secure its products, CI/CD, and production cloud environments through security reviews, vulnerability management, and detection and response work.

Germany Full-time Senior Application Security Engineer
AWS Azure CI/CD CloudFormation GCP Go Helm Kubernetes Pulumi Python Terraform
3 hours, 16 minutes ago
Jobandtalent

HQ - Senior Application Security Engineer (Remote)

Jobandtalent 1K-5K Professional Services

Job&Talent is hiring a Senior Application Security Engineer to strengthen secure product development and shape the application security strategy across the software development lifecycle.

Spain Europe Full-time Senior Application Security Engineer
Burp Suite CI/CD HTTP Kubernetes Penetration Testing Python TCP/IP TLS WAF
3 hours, 46 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers