RemoteLeaf Logo
Log in Sign up

Staff Product Security Engineer

3 weeks, 6 days ago
United States
Full-time
Lead
Application Security Engineer
Cybersecurity
AWS Burp Suite CI/CD DynamoDB GCP Helm IoT Java Kotlin Kubernetes Metasploit MySQL Node.js Penetration Testing Postman React Redis Swift SwiftUI
Apply Now
Greenlight

Greenlight

Greenlight is a financial technology company offering a debit card and money app for families, empowering parents to raise financially smart kids through smart spending and investing.

Capital Markets
251-1K
Founded 2014
$556M raised
View All Jobs 12

Description

  • Lead security architecture and design reviews and threat modeling sessions with product and engineering teams.
  • Translate identified threats into prioritized engineering remediations based on risk and severity.
  • Conduct hands-on penetration testing and security assessments across the full product stack.
  • Red-team AI-powered products and development tools to identify prompt injection, data exfiltration, MCP exploitation, and tool misuse.
  • Drive PSIRT operations, including vulnerability triage, technical investigation, severity scoring, and coordinated disclosure.
  • Manage zero-day findings and work with engineering to patch or mitigate issues using compensating controls.
  • Define and enforce security guardrails for AI-assisted development environments and enterprise policies for AI tools.
  • Partner with architects, product managers, engineers, legal, compliance, and executives on security and compliance decisions.
  • Mentor junior security engineers and help build a strong security culture through training and evangelism.
  • Collaborate with the AI team to secure machine learning pipelines and related workflows.

Requirements

  • 10+ years of product security experience across application security, cloud security, and secure SDLC.
  • Full SDLC experience from design through development, deployment, and incident response.
  • Expert-level threat modeling experience using STRIDE, PASTA, or equivalent methodologies.
  • Hands-on penetration testing experience across applications, APIs, cloud infrastructure, and hardware/firmware.
  • Published research, CVE discoveries, bug bounty results, or red-team engagement experience is preferred.
  • PSIRT operational experience with vulnerability intake, triage, CVE, CVSS, and FIRST PSIRT frameworks.
  • Deep AI security expertise, including OWASP Top 10 for LLMs, APIs, web, and mobile, plus practical MITRE experience.
  • Strong hands-on experience with SAST, DAST, SCA, and securing AI development tools such as Claude and Cursor.
  • Experience defining enterprise guardrails for MCP security, AI-generated code, secrets scanning, and DLP for outbound AI traffic.
  • Strong programming ability to review code, build security tools, and automate workflows.
  • Deep technical knowledge of CI/CD pipelines for web and mobile applications.
  • Experience with Node.js, Java/Kotlin, React, Redux, Swift, SwiftUI, AWS, GCP, Kubernetes, Ambassador, Helm, MySQL, DynamoDB, and Redis.
  • Ability to influence without authority, mentor without managing, and communicate complex risks to technical and non-technical stakeholders.
  • Hardware and embedded security experience, including secure boot, firmware integrity, hardware root of trust, and IoT threat modeling, is preferred.
  • Financial industry experience and knowledge of PCI DSS or COPPA are preferred.

Benefits

  • Medical, dental, vision, and HSA match.
  • Paid life insurance, AD&D, and disability benefits.
  • Traditional 401(k) with company match.
  • Unlimited PTO.
  • Paid company holidays and pop-up bonus holidays.
  • Professional development stipends.
  • Mental health resources.
  • 1:1 financial planners.
  • Fertility healthcare.
  • 100% paid parental and caregiving leave, plus cleaning service and meals during leave.
  • Flexible work-from-home options with both remote and in-office opportunities.
  • Fully stocked kitchen, catered lunches, and occasional in-office happy hours.
  • Employee resource groups.
  • Competitive compensation with market-based pay.
  • Discretionary performance bonus and equity rewards.
  • Estimated base pay range: $165,000-$200,000 in NY/CA/WA and $165,000-$185,000 in CO.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Cato Networks

DevSecOps

Cato Networks 251-1K Diversified Telecommunication Services

Cato Networks is hiring an Application Security Engineer (DevSecOps) to embed security across its cloud-based software development lifecycle and help R&D teams deliver secure applications at scale.

Israel Mid Level Application Security Engineer
Agile AWS CI/CD DevSecOps Docker Go Java Kubernetes Microservices Network Security Python Terraform
2 days, 21 hours ago
Huntress

Manager, Product Research

Huntress 251-1K Professional Services

Huntress is hiring a remote US Product Research Manager to lead cybersecurity research efforts that improve threat detection and prevention for customers.

United States Full-time Lead Application Security Engineer Product Manager
$195k-$225k
Cybersecurity
5 days, 22 hours ago
Zeta Global

Lead Application Security Engineer

Zeta Global 1K-5K Media

Zeta Global is hiring a Lead Application Security Engineer to strengthen application and platform security across its AI-powered marketing platforms through automated, AI-native security practices and cross-functional security engineering.

United States Full-time Lead Application Security Engineer
$140k-$180k
AWS Azure Burp Suite CI/CD Cybersecurity DevSecOps Django Docker FastAPI GCP JWT Kubernetes Microservices Node.js OAuth OpenID Connect React SonarQube
6 days, 21 hours ago
Anaplan

Principal Security Architect (Product Security)

Anaplan 1K-5K Internet Software & Services

Anaplan is hiring a Senior Security Architecture IC to define and drive secure-by-design architecture across its enterprise planning platform and AI products.

United Kingdom Lead Application Security Engineer
Encryption Machine Learning OWASP
1 week, 2 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers