Senior Security Engineer

Senior Product Security Engineer - AI/LLM Security

Location: Remote

Type: Full-time

About the Role

We are seeking a Senior Product Security Engineer to secure enterprise applications and AI-powered products across multiple engineering teams. This role demands strong, hands-on security expertise in vulnerability discovery, exploitation skills, and the ability to independently assess risks within fast-moving development environments.

Key Responsibilities

• Own comprehensive security assessments for web, API, cloud, Kubernetes, and AI/LLM applications (including prompt injection testing).
• Perform manual vulnerability discovery, source-code review, threat modeling, and architecture reviews beyond automated scanning.
• Prioritize risks based on exploitability and business impact rather than scanner scores alone.
• Integrate security into SDLC and CI/CD pipelines using SAST, DAST, SCA, and secrets detection tools.
• Communicate technical findings clearly to engineering teams and stakeholders with actionable remediation guidance.

Required Qualifications

• Demonstrated expertise in Product Security or Offensive Security (OWASP Top 10, authentication/authorization flaws).
• Strong proficiency with Burp Suite, OWASP ZAP, root-cause analysis, and remediation validation.
• Experience securing cloud environments (GCP/AWS), containers, IAM, and CI/CD pipelines.
• Hands-on experience testing AI/LLM applications for risks like data leakage, insecure tool usage, and authorization bypasses.

Nice to Have

• Experience with RAG-based apps, agentic AI systems, or MCP integrations.
  
• AWS/Azure cloud security experience.
  
• Certifications: OSCP, OSWE, GIAC, CREST.

Success Criteria

Vulnerabilities identified before production incidents; critical risks prioritized by business impact; scalable controls that do not slow delivery; and comprehensive assessment of AI agents for traditional scanner-blind threats.