Senior Product Security Engineer

What you'll do

• Build and operate automated security scanners and guardrails across the software development lifecycle.
• Identify and reduce risks in source code, open source dependencies, secrets, and software supply chains.
• Tune SAST, SCA, and supply chain controls while investigating gaps and false positives.
• Write and review code, APIs, detection rules, and automation to enforce security policies.
• Evaluate new technical surfaces, including AI/LLM tools, to define appropriate security controls.
• Use telemetry and metrics to improve the reliability, coverage, and performance of security tooling.
• Partner with engineering and platform teams to troubleshoot integrations and deliver practical security improvements.

What we're looking for

• 3+ years of relevant experience and a Bachelor’s degree or an equivalent combination of education and experience.
• 3-5 years of experience in software engineering, application or product security, DevSecOps, or cybersecurity.
• Programming and scripting experience in multiple languages including Python, Go, Bash, Java, and Javascript.
• Experience developing and operating security automation in CI/CD workflows, including SAST, SCA, secrets detection, or supply chain security.
• Working knowledge of secure software development, common application vulnerabilities, and practical remediation approaches.
• Experience with GCP, Kubernetes, Terraform, and other cloud-native technologies.
• Experience with SLSA, SBOMs, provenance, artifact signing, or dependency governance (preferred).
• Familiarity with security considerations for AI/LLM development tools and supply chains (preferred).