RemoteLeaf Logo
Log in Sign up

Staff Security Engineer, Product Security

22 hours, 6 minutes ago
United States
Full-time
Lead
Security Engineer
Cybersecurity
Agile Burp Suite Go Java Kotlin Kubernetes OAuth Python Ruby SAML TypeScript
Apply Now
Flexport

Flexport

Flexport is a global logistics platform that aims to simplify and optimize the process of moving goods around the world. By leveraging technology, Flexport provides end-to-end supply chain solutions, including freight forwarding, customs brokerage, and...

Professional Services
1001-5000
Founded 2013
$2400M raised
View All Jobs 4

Description

  • Define product and service security architecture, patterns, and reference implementations.
  • Lead security engineering reviews for high-risk product features and establish review standards.
  • Build and scale the security champions program and product security training.
  • Lead domain-specific threat modeling and attack-surface analysis across the product portfolio.
  • Partner with engineering leadership to resolve complex security design tradeoffs.
  • Set standards for triaging, reproducing, and prioritizing bug bounty and internal security reports.
  • Drive remediation of systemic vulnerability classes and handle critical security cases.
  • Own security services and tooling used by product teams across global infrastructure.
  • Mentor security engineers and serve as the technical authority for product security.

Requirements

  • 8+ years of product or application security experience, including hands-on development of security tools and services.
  • Experience designing scalable security architecture across multiple teams and services.
  • Strong knowledge of web application security principles and application testing tools such as Burp Suite or OWASP ZAP.
  • Software development experience in Go, Python, Java/Kotlin, TypeScript, Ruby, or a similar modern language.
  • Experience leading multi-team technical initiatives and mentoring engineers.
  • Experience running or scaling a security champions program (preferred).
  • Experience with identity management and federation, including SAML, OAuth, and SCIM (preferred).
  • Experience with IaaS cloud infrastructure, Kubernetes, containers, and service-oriented architectures (preferred).
  • Hands-on experience with bug bounty platforms and SAST tools such as Cycode, Semgrep, or Snyk (preferred).
  • Experience auditing internal or open-source libraries before production release (preferred).

Benefits

  • Base salary range of $148,210–$270,703 USD, depending on location, role level, skills, and experience.
  • Bonus and equity as part of the total rewards package.
  • Comprehensive medical and dental benefits.
  • Flexible time off.
  • Remote work opportunity.
  • Latest hardware, software, and access to frontier AI models.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

vivenu

Senior Security Engineer - AppSec (d/f/m)

vivenu 51-200 Media

As a Senior Security Engineer – AppSec at vivenu, you will build and scale the application security program for a global ticketing platform serving major live-entertainment brands.

Germany Full-time Senior Security Engineer
Argo CD AWS Azure CI/CD Cybersecurity GCP GitHub GitOps Go Kubernetes Penetration Testing Terraform TypeScript
21 hours, 6 minutes ago
Anchorage Digital

Member of Technical Staff, Security Engineering

Anchorage Digital 201-500 Capital Markets

Join Anchorage Digital’s Security team to build and strengthen cryptographic controls that protect institutional digital-asset infrastructure and customer assets.

United States Full-time Senior Security Engineer
C C++ Encryption Go Rust
21 hours, 6 minutes ago
Zip

Senior Security Engineer I

Zip 1001-5000 Banks

Zip is hiring a Senior Security Engineer to strengthen cloud-native security controls and secure AI adoption across its Azure- and GCP-based BNPL platform.

United States Full-time Senior Security Engineer
$122k-$150k
Agile Azure CI/CD GCP Microservices Network Security Secrets Management
21 hours, 36 minutes ago
Riot Games

Anti-Cheat Engineering Intern (Masters/PhD) - Summer 2027

Riot Games 1001-5000 Internet Software & Services

Join Riot Games’ Anti-Cheat team as an Engineering Intern to research how agentic AI affects software obfuscation and virtualization, helping strengthen protections for fair multiplayer games.

United States Internship Entry Level Security Engineer
$168k-$168k
C C++ Git Python
22 hours, 6 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers