RemoteLeaf Logo
Log in Sign up

Product Security Engineer

3 weeks ago
United States
Full-time
Junior
Application Security Engineer
Cybersecurity
Agile AWS Bash CI/CD Cybersecurity Datadog Django Flask GitLab HashiCorp Vault Packer Penetration Testing PostgreSQL Python Redis Terraform
Apply Now
Modern Health

Modern Health

Modern Health provides a personalized mental health care platform tailored for enterprises, aiming to enhance employee resilience, productivity, and overall well-being through evidence-based services.

Health Care Providers & Services
251-1K
Founded 2017
$167M raised
View All Jobs 7

Description

  • Analyze application vulnerabilities, assess risk, and coordinate remediation with engineering teams.
  • Research emerging product threats, vulnerabilities, and mitigation techniques in health technology.
  • Integrate security practices throughout the software development lifecycle and agile delivery process.
  • Develop and implement application and product security standards, controls, and solutions.
  • Test, audit, and monitor application and cloud infrastructure security posture.
  • Guide engineers on secure coding practices and conduct secure code reviews.
  • Deploy and manage security tools including SAST, DAST, and HashiCorp Vault.
  • Lead threat modeling and support targeted penetration testing for new features.
  • Partner with infrastructure and operations teams on endpoint, access management, device, and IT security controls.
  • Assess and improve AWS security architecture, policies, logging, detection, and secure CI/CD controls.

Requirements

  • 2–4 years of product or application security experience, or 1–3 years of security-focused software engineering experience.
  • Hands-on experience with vulnerability management, secure code review, threat modeling, and application security tools.
  • Strong knowledge of secure software development, security architecture, and infrastructure practices.
  • Experience integrating security into agile product delivery and reviewing code with software engineers.
  • Proficiency in at least one scripting language; Python or Bash preferred.
  • Experience assessing AWS security posture, including IAM, segmentation, vulnerability management, logging, detection, CI/CD, or Terraform controls.
  • Experience building or applying security controls for AI systems and using AI in security workflows preferred.
  • Strong written and verbal communication skills with the ability to work independently and cross-functionally.
  • Experience with AWS, GitLab CI/CD, Python, PostgreSQL, Redis, Datadog, Sentry, Terraform, or Packer preferred.
  • U.S. work authorization is required; employer sponsorship is unavailable. High-growth startup, SaaS, health tech, or software engineering experience is a plus.

Benefits

  • Remote work within the United States with required overlapping working hours; eligible employees participate in the equity program.
  • Zone-based base salary ranges from $101,405–$119,340 to $119,300–$140,400 USD.
  • Medical, dental, vision, disability, and life insurance, plus HSA and FSA options.
  • Flexible time off, company-wide pause days, and access to Modern Health coaches and therapists.
  • Parental leave, family-forming support through Carrot, and family assistance through UrbanSitter.
  • Professional development stipend, 401(k), and financial planning support through Origin.
  • Annual wellness stipend, work-from-home setup stipend, monthly cell phone reimbursement, and virtual community events.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Chainguard

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

United States Full-time Senior Application Security Engineer
$157k-$184k
AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
3 days, 5 hours ago
Bugcrowd

Product Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is hiring a Security Engineer to partner with engineering and product teams remotely, building secure-by-default systems and driving measurable application security outcomes.

Costa Rica Full-time Mid Level Application Security Engineer
AWS Docker GCP Go Java Kubernetes Python Ruby Terraform
1 week, 2 days ago
Cleo

Staff Application & Product Security Engineer

Cleo 251-1K Internet Software & Services

Cleo is hiring a Staff Application Security Engineer to own secure product development and the security posture of its SaaS and customer-hosted products, partnering with engineering and security teams from design through release.

United States Full-time Lead Application Security Engineer
$160k-$180k
AWS Burp Suite CI/CD GitHub Go Java Jenkins Kubernetes Penetration Testing Python SAML Terraform TypeScript
1 week, 2 days ago
Bugcrowd

Application Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is seeking an Application Security Engineer to triage and validate vulnerability submissions across client bug bounty programs, communicate with researchers and customers, and escalate critical security incidents.

Brazil Full-time Mid Level Application Security Engineer
Burp Suite Nmap
2 weeks, 3 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers