Product Security Engineer (AI)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: Remote - US; candidates must be based in the United States. US-based team members outside the Pacific time zone are expected to work at least six hours between 8 am and 5 pm Pacific time each workday.
Annual base pay: $101,405–$119,340 for Zone 4; $107,370–$126,360 for Zone 3; $119,300–$140,400 for Zones 1 and 2. Full-time employees may also be eligible for equity.
Company
is a mental health benefits platform providing employers and their employees with one-on-one, group, and self-serve digital resources.
What you will do
- Analyze vulnerabilities in web and mobile applications, assess risk, and drive remediation with engineering teams.
- Integrate security into the software development lifecycle, agile delivery, architecture, and engineering decision-making.
- Conduct threat modeling, secure code reviews, security audits, penetration-test planning, and cloud configuration assessments.
- Deploy, optimize, and manage security tooling including SAST, DAST, HashiCorp Vault, and other application security solutions.
- Improve AWS security posture through IAM reviews, segmentation, vulnerability management, centralized logging, detection, and secure CI/CD or Terraform controls.
- Partner with Engineering, Product, DevOps, Infrastructure, and Operations on application, cloud, IT, endpoint, and access security.
Requirements
- 2–4 years of experience in product or application security, or 1–3 years in security-focused software engineering.
- Hands-on experience with vulnerability management, secure code review, threat modeling, secure software development, and product security tools.
- Experience with at least one scripting language; Python or Bash preferred.
- Experience integrating security into agile product delivery and providing security feedback during code reviews.
- Experience building or applying security controls for AI systems and using AI in security engineering workflows.
- Must be authorized to work in the United States throughout employment; immigration sponsorship, employer-provided training plans, and attestations are not available.
Nice to have
- Experience at a high-growth startup.
- Experience with SaaS software, health tech, or software engineering.
Culture & Benefits
- Fully remote workforce with overlapping working hours for team connectivity.
- Medical, dental, vision, disability, and life insurance, plus HSA and FSA options.
- Flexible time off, company-wide pause days, parental leave, and family support benefits.
- Professional development stipend, wellness stipend, new-hire work-from-home setup stipend, and monthly cell phone reimbursement.
- 401(k), financial planning benefit, access to coaches and therapists, and virtual community events.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →