Senior Product Security Engineer

About the Role

We are seeking a Senior Product Security Engineer - AI/LLM Security to secure enterprise applications and autonomous products. This role demands hands-on offensive security expertise, deep vulnerability discovery skills, and the ability to drive remediation across fast-moving engineering teams.

• Owning end-to-end security assessments for web apps, APIs, cloud infrastructures (Kubernetes), and AI-powered products.
• Performing manual testing beyond automated scanners: uncovering real-world exploits in authentication, business logic, IAM, containers, and Kubernetes environments.
• Specialized LLM Security Testing:
• Detecting prompt/indirect injection attacks
• Identifying sensitive data leakage risks
• Auditing insecure tool usage by AI agents
• Risk Prioritization: Evaluating vulnerabilities based on exploitability and business impact, not just CVSS scores.
• Fully owning the remediation lifecycle: working with engineering teams to fix blockers, retest fixes, and close findings in CI/CD pipelines using SAST/DAST/SCA tools.

• Strong background in Product/Application Security or Offensive Security (e.g., Red Teaming).
• Mastery of OWASP Top 10, web/API security flaws, and business logic vulnerabilities.
• Demonstrated ability to independently find and validate complex issues that automated tools miss.
• Practical experience with Burp Suite/OWASP ZAP, source-code reviews, threat modeling, and secure architecture design.
• Hands-on securing of GCP/AWS environments, Containers/Kubernetes, and CI/CD pipelines.
• Experience testing AI agents for risks like prompt injection or data leakage in RAG/agentic workflows (Nice to have).