Staff Product Security Engineer - AI-Driven, Remote

Cyber StrategiX; France; Remote; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Remote-first flexibility

25 days PTO baseline

Volunteer days

Remote setup support

Two annual in-person get-togethers

Job summary

Filigran is seeking a Staff AppSec / Product Security Engineer to embed security across its XTM platform. You’ll advise the CISO, lead threat modeling and secure SDLC, and coach engineers to own security within their scope.

This is a remote-first, full-time role based in France, collaborating with R&D, compliance, and security researchers to protect thousands of organizations. You will drive secure CI/CD tooling, vulnerability management, and provide mentorship across teams, leveraging AI-driven

Qualifications

• Advanced knowledge of secure SDLC and cloud-native architectures.
• Experience influencing across cross-functional teams in SaaS/enterprise environments.
• Strong background in API and GraphQL security, RBAC and multi-tenancy.

Responsibilities

• Advise the CISO on product security strategy across the XTM platform and implement it in product teams.
• Lead threat modeling and security reviews for features such as authentication, RBAC, multi-tenancy, connectors, GraphQL API, and AI features.
• Ensure secure code through PRs, fixes, and reviews; develop secure-by-default components for authorization and secrets.
• Drive CI security tooling (SAST, SCA, secret scanning, SBOMs) and trusted release practices.
• Manage product vulnerability processes: intake, coordinated disclosure, CVEs, remediation SLAs.
• Mentor engineers and grow security champions through pairing and workshops.

Skills

Python

TypeScript

Node.js

Rust

Web/API security

Education

Master degree in computer science or cybersecurity

Tools

SAST

SCA

Renovate

Snyk

SBOMs

Job description

Filigran is seeking a Staff AppSec / Product Security Engineer to embed security across its XTM platform. You’ll advise the CISO, lead threat modeling and secure SDLC, and coach engineers to own security within their scope.

This is a remote-first, full-time role based in France, collaborating with R&D, compliance, and security researchers to protect thousands of organizations. You will drive secure CI/CD tooling, vulnerability management, and provide mentorship across teams, leveraging AI-driven