Product Security Engineer

LaunchDarkly; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

LaunchDarkly's Product Security team is hiring a Product Security Engineer II to strengthen how we secure the platform engineers build with every day. You'll bring depth in security fundamentals and program design as a member of a small, high-leverage team with strong engineering instincts.

We focus on threat modeling and cloud security posture, with rotation to other ProdSec areas. You will report to the Director of Security and explore AI-assisted security improvements for faster, safer

Qualifications

• 2 to 4 years of security engineering experience.
• Strong fundamentals in security and program design.
• Proactive attitude and collaboration with engineering teams.

Responsibilities

• Lead threat modeling engagements for features and services with elevated risk.
• Evolve ProdSec practice from on-request to repeatable with clear engagement criteria.
• Own triage of CNAPP findings end to end and drive systemic fixes.
• Contribute to SDLC tooling and bug bounty triage as needed.
• Partner with product engineering as a trusted reviewer and explain trade-offs.

Skills

Threat modeling

Security fundamentals

Engineering collaboration

Tools

SAST

SCA

Job description

About the Job

LaunchDarkly's Product Security team is hiring a Product Security Engineer II to strengthen how we secure the platform engineers build with every day. You'll bring depth in security fundamentals and program design as a member of a small, high-leverage team with strong engineering instincts.

LaunchDarkly is critical infrastructure. Our security team keeps it safe for the global systems that depend on us. You'll spend most of your time on threat modeling and cloud security posture, with rotating exposure to the rest of the ProdSec surface area. Your work will help developers move fast without sacrificing security, through automation, guidance, and the kind of partnership that makes the secure path the easy one.

You’ll report to the Director of Security and work closely with software engineers, product managers, and other security engineers. We expect you to bring a sharp point of view on where AI can take work off the team's plate and make our coverage deeper.

Responsibilities

• Lead threat modeling engagements on the features and services where the risk warrants it.
• Partner with the ProdSec lead to evolve the practice from on-request to repeatable, with clear criteria for when an engagement is worth running.
• Own day-to-day triage of CNAPP findings end to end. Investigate, prioritize, route to service owners, and close the loop. Look for patterns that point to systemic fixes instead of one-off cleanup.
• Contribute to SDLC tooling, SAST/SCA workflows, and bug bounty triage as the team's work demands.
• Partner with product engineering teams as a trusted reviewer. Catch issues early, explain the why, propose paths forward. Say no when needed, with reasons and alternatives.
• Bring AI to the work. Use it to accelerate triage, summarize findings, draft threat models, scan code, and reduce toil. Help the team build durable patterns for safe and effective use, not one-off prompts.
• Push the security floor up over time through documentation, office hours, small tooling improvements, and the kind of compounding work that prevents incidents rather than responds to them.

About You

You're proactive by default. You'd rather spot drift early and fix the cause than chase symptoms after an incident.

You believe security is a craft of habits and systems. Small consistent improvements beat heroic one-offs.

You invest in relationships with the engineering, product, and leadership teams you work with.

You know security work moves at the speed of trust.

You're a good partner. You're helpful and direct, you say no with reasons and alternatives, and you don't mistake gatekeeping for rigor.

You're security-first by background but engineering-curious by nature. You want to understand how the systems work, not just what's wrong with them.

You treat AI as part of the toolkit. You're skeptical where you should be, aggressive where it pays off, and you want to work somewhere that's serious about both.

Qualifications

2 to 4 years of