Product Security Engineer

Role Overview We are seeking a Senior Product Security Engineer to partner with product and engineering teams in building secure, resilient software. This hands-on role combines product security, backend engineering, application security, cloud infrastructure, and AI/LLM security. The ideal candidate can assess risk early in the product-development lifecycle, build practical security solutions, validate findings through hands-on testing, and communicate clearly with engineers, product leaders, executives, and Legal. Key Responsibilities Adversarially test LLM-powered applications and agents for prompt injection, jailbreaks, tool abuse, data exfiltration, and related risks. Build and operate backend security services and internal tooling using TypeScript, Node.js, .NET, or Python. Review product requirements, technical designs, and pull requests to identify security risks before production. Perform manual security testing of web applications and APIs, validate exploitability, document findings, and retest fixes. Triage and improve SAST, software-composition analysis, and AI-assisted security findings. Support vulnerability management, bug bounty, penetration testing, threat hunting, investigations, and incident response. Secure the infrastructure supporting security tooling, including IAM, secrets management, containers, networks, and infrastructure-as-code. Develop practical security guidance, training, and documentation for engineering teams. Evaluate security tools and help define security standards for AI and agentic systems.