AI-Driven Product Security Engineer

wine collective; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Fresh lunch provided

Commuter support

Health & wellness reimbursement

Flexible PTO and holidays

Comprehensive medical/dental/vision

Parental leave 16 weeks

401k + equity

Team events

Job summary

Collective is hiring a Product Security Engineer to design and operate an agentic security program at scale, with AI-driven triage and automated security review incorporated into the development pipeline. You will drive remediation across the platform, focusing on secure defaults and frameworks to eliminate classes of vulnerabilities.

You will work with product engineers on a fintech-informed platform handling sensitive financial data, blending SAST/DAST/SCA tooling, and evolving prompts and

Qualifications

• 4+ years of security engineering experience with depth in application security.
• Experience with SAST, DAST, and SCA tooling and CI/CD integration.
• Interest in building with LLMs and AI agents to automate security work.

Responsibilities

• Build and operate an agentic AppSec program with SAST/DAST/SCA in CI/CD.
• Drive end-to-end vulnerability remediation across the platform and verify fixes.
• Eliminate vulnerability classes at the root with secure defaults and framework fixes.

Skills

Security engineering

AppSec depth

AI/LLMs in security

Tools

Semgrep

CodeQL

Bandit

OWASP ZAP

Burp Suite

Job description

Collective is hiring a Product Security Engineer to design and operate an agentic security program at scale, with AI-driven triage and automated security review incorporated into the development pipeline. You will drive remediation across the platform, focusing on secure defaults and frameworks to eliminate classes of vulnerabilities.

You will work with product engineers on a fintech-informed platform handling sensitive financial data, blending SAST/DAST/SCA tooling, and evolving prompts and