Lead Product Security Engineer for AI & SaaS

Assembled; New York (NY); On-site; USD 140,000 - 200,000; Full time

Job summary

Assembled seeks an experienced Security Engineer to lead application security across SaaS and AI products. You’ll partner with product managers and engineers to define security practices, influence architecture, and build tooling to manage vulnerabilities from discovery to remediation.

With 5+ years in security engineering, you’ll drive threat modeling, secure design reviews, and vulnerability remediation while advancing secure coding training and incident response.

Qualifications

• 5+ years of hands-on application security experience, including threat modeling, security code reviews, and vulnerability remediation.
• Strong software engineering fundamentals with production code experience.
• Good risk judgment balancing security and shipping velocity.
• AI-tools usage for security investigation, testing, or remediation.

Responsibilities

• Lead threat modeling, secure design reviews, and vulnerability management across our SaaS and AI products and the underlying infrastructure.
• Integrate and automate controls for secrets, access, and dependency security within our engineering workflows and CI/CD pipelines.
• Establish and maintain code, dependency, and secrets scanning, alongside dynamic application security testing. Partner with third-party penetration testers and manage external vulnerability reporting and triage.
• Develop secure design and coding training for engineers. Establish clear processes for routing security issues to engineering owners and following through on fixes.
• Respond to security incidents involving application vulnerabilities, coordinating remediation efforts and post-incident improvements.
• Bring technical depth to customer security conversations and partner with Finance/Ops on the technical side of SOC 2 and assurance work.

Skills

Security engineering

Threat modeling

Security code reviews

Vulnerability remediation

AI tools in security

Software engineering fundamentals

Risk judgment

Tools

CI/CD tooling

Secrets management

Dependency scanning

Vulnerability reporting

Job description

Assembled seeks an experienced Security Engineer to lead application security across SaaS and AI products. You’ll partner with product managers and engineers to define security practices, influence architecture, and build tooling to manage vulnerabilities from discovery to remediation.

With 5+ years in security engineering, you’ll drive threat modeling, secure design reviews, and vulnerability remediation while advancing secure coding training and incident response.