RemoteLeaf Logo
Log in Sign up

Staff Product Security Engineer

1 month, 2 weeks ago
United States
Full-time
Lead
Application Security Engineer
Cybersecurity
AWS Burp Suite CI/CD DynamoDB GCP Helm IoT Java Kotlin Kubernetes Metasploit MySQL Node.js Penetration Testing Postman React Redis Swift SwiftUI
Apply Now
Greenlight

Greenlight

Greenlight is a financial technology company offering a debit card and money app for families, empowering parents to raise financially smart kids through smart spending and investing.

Capital Markets
251-1K
Founded 2014
$556M raised
View All Jobs 9

Description

  • Lead security architecture and design reviews and threat modeling sessions with product and engineering teams.
  • Translate identified threats into prioritized engineering remediations based on risk and severity.
  • Conduct hands-on penetration testing and security assessments across the full product stack.
  • Red-team AI-powered products and development tools to identify prompt injection, data exfiltration, MCP exploitation, and tool misuse.
  • Drive PSIRT operations, including vulnerability triage, technical investigation, severity scoring, and coordinated disclosure.
  • Manage zero-day findings and work with engineering to patch or mitigate issues using compensating controls.
  • Define and enforce security guardrails for AI-assisted development environments and enterprise policies for AI tools.
  • Partner with architects, product managers, engineers, legal, compliance, and executives on security and compliance decisions.
  • Mentor junior security engineers and help build a strong security culture through training and evangelism.
  • Collaborate with the AI team to secure machine learning pipelines and related workflows.

Requirements

  • 10+ years of product security experience across application security, cloud security, and secure SDLC.
  • Full SDLC experience from design through development, deployment, and incident response.
  • Expert-level threat modeling experience using STRIDE, PASTA, or equivalent methodologies.
  • Hands-on penetration testing experience across applications, APIs, cloud infrastructure, and hardware/firmware.
  • Published research, CVE discoveries, bug bounty results, or red-team engagement experience is preferred.
  • PSIRT operational experience with vulnerability intake, triage, CVE, CVSS, and FIRST PSIRT frameworks.
  • Deep AI security expertise, including OWASP Top 10 for LLMs, APIs, web, and mobile, plus practical MITRE experience.
  • Strong hands-on experience with SAST, DAST, SCA, and securing AI development tools such as Claude and Cursor.
  • Experience defining enterprise guardrails for MCP security, AI-generated code, secrets scanning, and DLP for outbound AI traffic.
  • Strong programming ability to review code, build security tools, and automate workflows.
  • Deep technical knowledge of CI/CD pipelines for web and mobile applications.
  • Experience with Node.js, Java/Kotlin, React, Redux, Swift, SwiftUI, AWS, GCP, Kubernetes, Ambassador, Helm, MySQL, DynamoDB, and Redis.
  • Ability to influence without authority, mentor without managing, and communicate complex risks to technical and non-technical stakeholders.
  • Hardware and embedded security experience, including secure boot, firmware integrity, hardware root of trust, and IoT threat modeling, is preferred.
  • Financial industry experience and knowledge of PCI DSS or COPPA are preferred.

Benefits

  • Medical, dental, vision, and HSA match.
  • Paid life insurance, AD&D, and disability benefits.
  • Traditional 401(k) with company match.
  • Unlimited PTO.
  • Paid company holidays and pop-up bonus holidays.
  • Professional development stipends.
  • Mental health resources.
  • 1:1 financial planners.
  • Fertility healthcare.
  • 100% paid parental and caregiving leave, plus cleaning service and meals during leave.
  • Flexible work-from-home options with both remote and in-office opportunities.
  • Fully stocked kitchen, catered lunches, and occasional in-office happy hours.
  • Employee resource groups.
  • Competitive compensation with market-based pay.
  • Discretionary performance bonus and equity rewards.
  • Estimated base pay range: $165,000-$200,000 in NY/CA/WA and $165,000-$185,000 in CO.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Beyond Finance

Staff Application Security Engineer

Beyond Finance 251-1K Banks

Beyond Finance is hiring a Staff Application Security Engineer to own and advance application security across its product and cloud engineering teams.

United States Full-time Lead Application Security Engineer
$160k-$195k
AWS CI/CD CloudFormation Go Python React Native Ruby on Rails Secrets Management Terraform
2 days, 12 hours ago
Canopy

Senior Application Security Engineer

Canopy 51-250 Internet Software & Services

Canopy is hiring a Senior Application Security Engineer to help secure its remote Utah-based SaaS platform for accounting firms, with a focus on hardening infrastructure, applications, observability, and the software supply chain.

United States Full-time Senior Application Security Engineer
AWS CI/CD Kubernetes Network Security SIEM WAF
2 days, 13 hours ago
Ondo Finance

Senior Security Engineer - Product Security

Ondo Finance 11-50 Diversified Financial Services

Ondo Finance is hiring a Senior Security Engineer for Product Security to secure its tokenized real-world asset platform by partnering with product engineering on threat modeling, secure reviews, and security-by-default delivery.

United States Senior Application Security Engineer
CI/CD Encryption Go JavaScript OAuth OpenID Connect Penetration Testing Python Rust Terraform TypeScript
4 days, 12 hours ago
Counterpart Health

Senior Application Security Engineer

Counterpart Health 51-200 hospital & health care

Counterpart Health is hiring a Senior Application Security Engineer to secure its AI-enabled primary care platform, Counterpart Assistant, by finding and fixing vulnerabilities that affect clinicians during live patient visits.

United States Full-time Senior Application Security Engineer
$135k-$175k
Penetration Testing
4 days, 13 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers