RemoteLeaf Logo
Log in Sign up

Product Security Engineer

5 days, 7 hours ago
United States
Full-time
Senior
Application Security Engineer
Cybersecurity
CI/CD JavaScript LLM Penetration Testing Python Serverless
Apply Now
YipitData

YipitData

YipitData specializes in market research for the disruptive economy by analyzing billions of data points daily to deliver accurate and timely insights on over 1,000 companies, aiding investors in making informed decisions and helping businesses enhance...

Professional Services
501-1000
Founded 2013
$492M raised
View All Jobs 38

Description

  • Conduct threat modeling and security design reviews early in the product development lifecycle.
  • Assess application architectures, APIs, identity controls, data flows, cloud services, and third-party integrations for security risks.
  • Identify, validate, and prioritize vulnerabilities based on real-world exploitability and customer impact.
  • Partner with engineers to develop practical remediation plans without unnecessarily slowing development.
  • Own and improve security tooling, including SAST, DAST, dependency, and secret scanning.
  • Tune security workflows to reduce false positives and deliver actionable findings to engineers.
  • Build automation to scale product-security capabilities across growing products and teams.
  • Develop secure design patterns, coding guidance, standards, and documentation.
  • Help lead investigation, containment, root-cause analysis, and long-term remediation for product security incidents.
  • Assess emerging threats affecting cloud and AI-enabled products.

Requirements

  • Experience in product security, application security, software engineering, penetration testing, or a similar role.
  • Ability to conduct threat modeling, architecture reviews, and application security assessments.
  • Experience validating vulnerabilities, assessing exploitability, and communicating risk to technical and business stakeholders.
  • Knowledge of APIs, cloud services, containers, serverless technologies, and CI/CD pipelines.
  • Experience with SAST, DAST, dependency scanning, secret scanning, or infrastructure-as-code scanning.
  • Ability to read and write code and automate security work using Python, JavaScript, or a similar language.
  • Strong judgment in balancing security, customer impact, engineering effort, and business priorities.
  • Clear communication skills and ability to build credibility with technical and non-technical partners.
  • Experience securing AI-enabled products, agents, LLM applications, or MCP integrations (preferred).
  • Experience with identity, authentication, authorization, multi-tenant security, or frameworks such as OWASP Top 10, OWASP MCP Top 10, OWASP ASVS, or NIST (preferred).

Benefits

  • Annual base salary of $180,000, with final compensation based on experience and other factors.
  • Remote-friendly role available anywhere in the United States, with flexible work hours.
  • Flexible vacation policy.
  • Generous 401(k) match.
  • Parental leave.
  • Wellness budget and team events.
  • Learning reimbursement and professional development support.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Lever

Web Developer Security Engineer

Lever 201-500 Professional Services

Spry Methods seeks a Web Developer Security Engineer to embed application security across mission-critical federal and DoD web applications, APIs, and sensitive data throughout the software development lifecycle.

United States Full-time Mid Level Application Security Engineer
$135k-$155k
CSS Cybersecurity DevSecOps HTML JavaScript .NET REST API SQL
2 days, 7 hours ago
Bitly

Staff Application Security Engineer (R5949)

Bitly 201-500 Internet Software & Services

Shield AI is seeking a Staff Application Security Engineer to lead the evolution of its developer-centered secure SDLC and software supply-chain security program for defense technology products.

Anywhere Full-time Lead Application Security Engineer
$143k-$214k
Burp Suite CI/CD DevSecOps Kubernetes Microservices SonarQube
5 days, 7 hours ago
Anomali

Senior Pre-Sales Solutions Engineer - SIEM/Security Analytics / CTI (Central/West)

Anomali 201-500 IT Services

Anomali is seeking a Senior Solutions Engineer to lead SIEM and cyber threat intelligence pre-sales engagements, support enterprise and channel partners, and drive regional revenue growth.

United States Full-time Senior Sales Engineer
Linux Perl Python Splunk
7 hours, 17 minutes ago
Bogaard Group International

Security Systems Solutions Engineer

Bogaard Group International 11-50 Professional Services

As a fully remote Security Systems Solution Engineer embedded with the client’s Security Technology team, you will advance and integrate global physical security systems to improve operational effectiveness and return on investment.

United States Full-time Mid Level Systems Engineer
$110k-$130k
7 hours, 17 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers