RemoteLeaf Logo
Log in Sign up

Senior Manager, Product Security

1 month, 1 week ago
United States
Full-time
Lead
Application Security Engineer
Cybersecurity
AWS CI/CD DevSecOps Docker Kubernetes Penetration Testing Ruby Rust TypeScript
Apply Now
Tines

Tines

Tines is a smart, secure workflow builder that empowers technical teams to automate processes without code, making security teams more effective and efficient.

Construction & Engineering
51-250
Founded 2018
$96M raised
View All Jobs 19

Description

  • Define and execute the product security strategy, roadmap, operating model, and success metrics.
  • Hire, manage, mentor, and develop product security engineers and build a high-performing team.
  • Partner with engineering, product, infrastructure, legal, compliance, and executive stakeholders on risk-based security decisions.
  • Establish secure software development practices, including security requirements, architecture reviews, threat modeling, testing, and remediation.
  • Use AI and automation for security reviews, vulnerability triage, risk identification, and agentic workflows.
  • Identify and mitigate risks in AI-powered products, including prompt injection, data leakage, model abuse, excessive agency, and insecure tool use.
  • Guide secure architectures and platform controls for cloud-native, multi-tenant products.
  • Own vulnerability management, disclosure, bug bounty submissions, remediation, and product security incident response.
  • Build secure-by-default developer tooling, automated controls, security education, and security champion programs.
  • Measure and communicate security effectiveness, risks, investments, progress, and tradeoffs to technical and executive audiences.

Requirements

  • 8+ years of experience in application security, product security, or related security engineering roles, including cloud-native SaaS security.
  • 5+ years of people management or technical leadership experience building security teams or programs.
  • Experience defining product security strategy, roadmaps, and risk-based investment priorities.
  • Strong foundation in application security, secure architecture, threat modeling, OWASP Top 10, and secure SDLC practices.
  • Experience using AI and automation for security, such as LLM-assisted code review, automated vulnerability triage, or agentic workflows.
  • Experience securing cloud environments, preferably AWS, and containerized infrastructure with Docker and Kubernetes.
  • Knowledge of modern programming languages; Ruby, TypeScript, and/or Rust experience is highly desirable.
  • Experience with SAST, DAST, SCA, secrets detection, CI/CD security integrations, DevSecOps, and secure developer workflows.
  • Experience leading product security incident response and operating vulnerability disclosure or bug bounty programs.
  • Preferred: Experience securing AI/ML and LLM-powered systems, LLM red-teaming, MITRE ATLAS, OWASP LLM guidance, Tines automation, multi-tenant SaaS, FedRAMP or DoD environments, and customer-facing security programs.
  • U.S. work authorization required; visa sponsorship is unavailable.

Benefits

  • Target annual compensation of $250,000–$275,000 plus equity.
  • Remote work available within the United States.
  • Opportunities for learning, growth, and career development.
  • Equal employment opportunities across legally protected characteristics.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Chainguard

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

United States Full-time Senior Application Security Engineer
$157k-$184k
AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
4 days, 22 hours ago
Bugcrowd

Product Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is hiring a Security Engineer to partner with engineering and product teams remotely, building secure-by-default systems and driving measurable application security outcomes.

Costa Rica Full-time Mid Level Application Security Engineer
AWS Docker GCP Go Java Kubernetes Python Ruby Terraform
1 week, 3 days ago
Cleo

Staff Application & Product Security Engineer

Cleo 251-1K Internet Software & Services

Cleo is hiring a Staff Application Security Engineer to own secure product development and the security posture of its SaaS and customer-hosted products, partnering with engineering and security teams from design through release.

United States Full-time Lead Application Security Engineer
$160k-$180k
AWS Burp Suite CI/CD GitHub Go Java Jenkins Kubernetes Penetration Testing Python SAML Terraform TypeScript
1 week, 3 days ago
Bugcrowd

Application Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is seeking an Application Security Engineer to triage and validate vulnerability submissions across client bug bounty programs, communicate with researchers and customers, and escalate critical security incidents.

Brazil Full-time Mid Level Application Security Engineer
Burp Suite Nmap
2 weeks, 4 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers