Product Security Engineer (Application Security)

Location: Remote - Mexico; work from home 100% of the time

Company

Preemptive security platform combining exposure discovery, offensive testing, and AI- and human-driven intelligence to help organizations identify and prevent real-world security risks.

What you will do

• Partner with engineering to refine architecture, validate features, and drive security investment while supporting engineering velocity.
• Build secure defaults, libraries, and security “paved roads” that eliminate entire classes of vulnerabilities.
• Tune SAST, DAST, SCA, and secret-scanning tools to reduce noise and prioritize meaningful findings.
• Use the bug bounty program as a customer to test new approaches, provide product feedback, and collaborate with engineering and product.
• Lead cross-functional product security projects from scoping through delivery and communicate risk to technical and non-technical stakeholders.
• Build code and automation that expands security coverage and eliminates repetitive work.

Requirements

• 3+ years of experience in product security, application security, or secure software development.
• Ability to review code, automate tasks, and build security tooling in at least one modern programming language, such as Python, Go, Ruby, or Java.
• Hands-on experience with threat modeling, secure code review, and automated testing using SAST, DAST, and SCA.
• Solid understanding of common vulnerability classes, including the OWASP Top 10.
• Demonstrated ability to manage projects and influence cross-functional partners across engineering, DevOps, and product.
• Bachelor’s degree in engineering, computer science, or a relevant field, or equivalent practical experience.
• Ability to complete the physical requirements of the role with or without reasonable accommodation, including remaining stationary for 50% of the time and carrying or moving a laptop as needed.

Nice to have

• Experience with bug bounty or vulnerability disclosure programs.
• Experience building secure-by-default internal libraries or security “paved roads.”
• Experience securing cloud-native platforms and Infrastructure as Code, including Terraform, AWS, GCP, Kubernetes, or Docker.
• Experience in a fast-paced, high-growth security or SaaS company.

Culture & Benefits

• Fully remote, work-from-home arrangement.
• Inclusive workplace focused on diversity and participation.
• Collaborative culture described as close-knit and supportive.
• Reasonable accommodations are available for qualified individuals with disabilities.