📋 Description

• Lead threat modeling and security design reviews for new products
• Analyze architecture, APIs, data flows, cloud services, and third‑party integrations for risk
• Identify and validate vulnerabilities; prioritize fixes with engineering teams
• Design remediation plans that protect customers without slowing development
• Own and improve security tooling across the development lifecycle (SAST, DAST, dependency scanning
• Automate security workflows to scale with product and AI growth

🎯 Requirements

• Experience in product/security engineering, application security, or related
• Ability to read and write code (Python, JavaScript) and automate security tasks
• Familiarity with API security, cloud services, containers, serverless, and CI/CD pipelines
• Experience with security tooling (SAST, DAST, dependency scanning, secret scanning) and secure
• Knowledge of OWASP Top 10, NIST frameworks, or similar risk models
• Strong judgment to balance security with customer impact and engineering effort

🎁 Benefits

• Flexible work hours and vacation policies
• Generous 401(k) match
• Parental leave and team events
• Wellness budget and learning reimbursement