Senior Product Security Engineer

Cyberjobs; Canada; Hybrid; CAD 157,000 - 214,000; Full time

Benefits offered by this job

Bonus potential

Equity

Job summary

Cyberjobs, on behalf of a partner company, seeks a Senior Product Security Engineer based in Canada. You will lead product security across an AI-native environment, embedding security throughout the software development lifecycle and collaborating with architecture, engineering, product, and compliance teams.

You’ll address AI-specific risks, model provenance, threat modeling, and governance, mentoring engineers and shaping security-by-design practices in a fast-moving cloud/AI landscape.

Qualifications

• 5–7+ years of experience in product, application, or cloud security engineering.
• Strong knowledge of secure SDLC practices, threat modeling, and secure architecture design.
• Ability to read and review code to support security assessments, threat models, and architectural reviews.
• Experience securing AI/ML pipelines, data workflows, and model-serving infrastructure, with practical knowledge of AI security risks.
• Strong understanding of cloud security principles across multi-cloud environments.
• Familiarity with DevSecOps practices and CI/CD environments.
• Knowledge of encryption fundamentals, TLS/mTLS, key management, and secrets handling.
• Understanding of modern authentication/authorization patterns (OAuth 2.0, OIDC, SAML, RBAC, ABAC).
• Demonstrated ability to lead cross-functional security initiatives.

Responsibilities

• Architect and implement security controls for AI/ML systems, including data pipelines and inference environments.
• Identify and mitigate AI-specific threats such as prompt injection, data poisoning, and model theft.
• Align AI security initiatives with governance and compliance frameworks (NIST AI RMF, EU AI Act).
• Embed security, privacy, and compliance requirements into the SDLC across applications, cloud, and AI development lifecycles.
• Define and maintain secure development standards and security best practices.
• Lead threat modeling, secure design reviews, and risk assessments across the lifecycle.
• Build security automation and governance capabilities integrated into engineering workflows.
• Prepare customer-facing security materials (questionnaires, whitepapers, trust documentation).
• Mentor engineering teams on secure coding and AI risk management.

Skills

Product security

Threat modeling

Security architecture

CI/CD security

Automation tooling

Tools

Kubernetes

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Product Security Engineer based in Canada

This role leads product security across an AI-native technology environment, with a strong focus on building secure, scalable, and trustworthy products. You’ll work closely with architecture, engineering, product, and compliance teams to embed security throughout the software development lifecycle. The position combines AI/ML security, secure architecture, threat modeling, automation, and customer-facing security assurance. You’ll help address emerging AI-specific risks while establishing practical security standards and governance frameworks. The role also offers the opportunity to influence architectural decisions, strengthen security culture, and mentor engineering teams. It is well suited to a senior security professional who enjoys solving complex problems at the intersection of product development, cloud, and AI.

Accountabilities:

• Architect and implement security controls for AI/ML systems, including model training, data pipelines, inference environments, and agentic workflows.
• Identify and mitigate AI-specific threats such as prompt injection, data poisoning, model inversion, and model theft.
• Establish controls for model provenance, integrity, auditability, and responsible AI security practices.
• Align AI security initiatives with governance and compliance frameworks such as NIST AI RMF and the EU AI Act.
• Embed security, privacy, and compliance requirements into application, cloud, software, and AI development lifecycles.
• Define and maintain secure development standards, architectural guidance, and security best practices.
• Lead threat modeling, secure design reviews, and risk assessments across the software development lifecycle.
• Build security automation and governance capabilities that integrate naturally into engineering workflows.
• Prepare customer-facing security assurance materials, including questionnaire responses, security whitepapers, and trust documentation.
• Represent product security in customer, leadership, and cross-functional discussions, helping communicate security requirements and risk decisions.
• Mentor engineering teams on secure coding, AI risk management, threat modeling, and secure design.
• Promote a security-first culture through documentation, training, advocacy, and continuous improvement.

Requirements

• 5–7+ years of experience in product, application, or cloud security engineering.
• Strong knowledge of secure SDLC practices, threat modeling, and secure architecture design.
• Ability to read and review code to support security assessments, threat models, and architectural reviews.
• Experience securing AI/ML pipelines, data workflows, and model-serving infrastructure, with practical knowledge of LLM and AI security risks such as prompt injection, model integrity, and provenance.
• Strong understanding of cloud security principles and best practices across multi-cloud environments.
• Familiarity with DevSecOps practices and CI/CD environments.
• Knowledge of encryption fundamentals, including symmetric and asymmetric cryptography, TLS/mTLS, key management, and secrets handling.
• Understanding of modern authentication and authorization patterns, including OAuth 2.0, OIDC, SAML, RBAC, and ABAC.
• Demonstrated ability to lead cross-functional security initiatives and collaborate with engineering, product, and compliance teams.
• Strong communication, stakeholder management, analytical thinking, and influencing skills.
• Experience with Python, Java, and/or JavaScript for security automation and tooling is an advantage.
• Experience with Kubernetes and container security, software supply chain security, artifact integrity, or bug bounty programs is a plus.
• Familiarity with security and compliance frameworks such as SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF is desirable.
• Certifications such as CKS, CISSP, CSSLP, or AI/ML security credentials are considered a plus.

Benefits

• Base compensation range of £90,000–£122,000 GBP.
• Potential performance-based bonus and equity.
• Generous benefits program.
• Opportunity to work on advanced AI/ML security, cloud security, secure architecture, and product security challenges.
• Ability to shape and influence product security strategy and security-by-design practices.
• Collaboration with engineering, architecture, product, compliance, and customer-facing teams.
• Opportunities to mentor teams and contribute to security culture, standards, and training.
• Career growth within a fast-moving technology environment.
• Commitment to an inclusive workplace and reasonable accommodations for qualified employees with disabilities.