Security Engineer, Product

Skills

About the Role

You will be the hands-on offensive security practitioner, breaking products before adversaries do. You will run penetration tests and red team exercises, build automated and agentic security tooling, test AI-specific attack surfaces, and contribute code to harden authentication and authorization and embed security into engineering workflows.

Requirements

• Professional penetration testing experience across web apps, APIs, cloud and ideally AI/ML systems
• Professional development experience in a strongly typed language (Rust, Go, Java, C++) and scripting languages (Python, Bash)
• Familiarity with Burp Suite, Nuclei, Semgrep and fuzzing frameworks
• Experience integrating SCA, SAST and DAST into CI/CD pipelines
• Experience with Terraform, Kubernetes and AWS/GCP security
• Clear communication and collaboration skills
• Knowledge of threat modeling, cryptography fundamentals and compliance frameworks (SOC 2, ISO 27001/42001, NIST CSF)

Responsibilities

• Conduct continuous penetration testing and red team assessments of applications, APIs, AI/ML pipelines and cloud environments
• Build agentic security tooling that finds, validates and patches vulnerabilities
• Develop custom offensive tooling, exploit chains and attack simulations
• Build and operate automated security testing and remediation pipelines
• Perform adversarial testing of AI attack surfaces such as prompt injection, model manipulation and data poisoning
• Conduct vulnerability research and bug hunting
• Lead threat modeling sessions with engineering teams
• Build attack simulation environments and validate security controls
• Contribute to backend codebases and harden authentication and authorization flows
• Lead purple team exercises
• Manage relationships with external pen test firms and drive remediation
• Share offensive tradecraft with engineering and leadership

Benefits

• Equity
• Medical coverage
• Dental coverage
• Vision coverage
• Paid time off