Product Security Engineer

What you'll do

• Build security analysis capabilities using LLM integrations, prompt engineering, and retrieval-augmented generation.
• Develop and maintain end-to-end platforms using React, Python FastAPI, Celery, Postgres, Redis, and Kubernetes.
• Evaluate LLM and retrieval outputs to ensure accuracy and reliability for internal users.
• Mitigate AI-specific risks including prompt injection, data exposure, and output manipulation.
• Make architectural decisions for new security capabilities while balancing performance, scalability, and responsible AI use.
• Identify security gaps with internal users and propose features to close those vulnerabilities.
• Translate security and product team requirements into scalable technical features.

What we're looking for

• Bachelor’s degree or equivalent practical experience in Computer Science, Engineering, or a related field.
• 4 to 6 years of software development experience, including full-stack or backend systems.
• Proficiency in Python and JavaScript, with React experience preferred.
• Experience with AI systems, including LLMs, prompt engineering, Azure OpenAI, and vector databases or retrieval-based systems.
• Solid foundation in Secure SDLC practices, application security, and threat modeling.
• Understanding of AI-specific risks like prompt injection and hallucination, with experience evaluating AI outputs.
• Familiarity with cloud platforms, preferably Azure, and containerized deployments.
• Knowledge of CI/CD pipelines, Git, and modern development workflows.