Senior Product Security Engineer

What you'll do

• Triage, validate, and reproduce incoming vulnerability reports from the bug bounty platform across web, API, and mobile surfaces.
• Assign CVSS scores and severity ratings to reported vulnerabilities based on internal guidelines and industry standards.
• Communicate with external researchers to request clarifications, provide status updates, and manage expectations regarding their submissions.
• Coordinate with product engineering teams to route confirmed vulnerabilities for timely remediation.
• Develop PowerBI dashboards to support data-driven analysis and tracking of remediation efforts.
• Create and maintain internal documentation, triage runbooks, and severity calibration guidelines.
• Perform security testing on AI/ML and LLM-powered products, including chat interfaces and inference APIs.
• Build and maintain automation workflows using SOAR platforms, Python scripts, and event-driven tools like AWS Lambda.

What we're looking for

• Bachelor’s degree or equivalent experience in Computer Science, Engineering, or a related field.
• 5+ years of practical experience in security testing and vulnerability management.
• In-depth knowledge of OWASP Top 10 vulnerabilities and mitigation techniques.
• Hands-on experience applying CVSS v3.1 scoring to real-world vulnerabilities.
• Proficiency in reproducing PoC exploits using Burp Suite, browser DevTools, curl, and custom scripts.
• Experience with penetration testing of AI/ML and LLM-powered products including chat interfaces and inference APIs.
• Proficiency in Python for writing production-quality integration code and experience with SOAR platforms.
• Expertise in event-driven automation using webhooks, AWS Lambda, and API Gateway.