Product Security Engineer

Belto Inc.; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Belto Inc. is seeking a remote mid‑level security engineer to join a distributed team focused on secure delivery and scalable architecture.

You will threat-model features, implement authentication and secrets handling, and integrate security testing into the CI pipeline while coaching peers on secure patterns.

Applicants must be enrolled at, or hold a degree from, Stanford University or Harvard University; this is a BELTO hiring policy and not sponsored by the universities.

Qualifications

• Requires strong software security background with practical depth across threat modeling, authentication, authorization and secrets handling.
• Knowledge of common vulnerability classes and mitigations.
• Experience with security tooling in CI and secure delivery pipelines.

Responsibilities

• Threat model features during design and record decisions.
• Implement authentication, authorization and secrets handling correctly.
• Build security testing into the delivery pipeline.
• Investigate vulnerability reports and drive fixes with evidence.
• Coach engineers on secure patterns in code review.

Skills

Security engineering

Vulnerability knowledge

Security tooling in CI

Security prioritisation

Education

Enrollment at Stanford or Harvard University (degree or in progress)

Job description

This is an active talent brief for work BELTO may staff as client demand and internal priorities require. Publication does not imply an existing team vacancy or a guaranteed hiring date.

This is a fully remote mid level role in BELTO Space. You will work with a distributed team on consequential client and internal priorities.The work combines hands-on delivery, architecture decisions, peer review, documentation and direct collaboration with commercial and delivery colleagues. We value clear reasoning, secure defaults and systems that remain understandable as they scale.Success means improving the quality and speed of decisions, leaving durable operating assets, and communicating trade-offs before they become surprises. The selection process includes a structured conversation and a practical, role-relevant exercise. We do not use protected personal characteristics in hiring decisions.

Responsibilities

• Threat model features during design and record the decisions.
• Implement authentication, authorisation and secrets handling correctly.
• Build security testing into the delivery pipeline.
• Investigate vulnerability reports and drive fixes with evidence.
• Coach engineers on secure patterns in code review.

Requirements

• Software engineering background with real security depth.
• Practical knowledge of common vulnerability classes and mitigations.
• Experience with security tooling in CI.
• Ability to prioritise by exploitability and impact, not scanner severity.
• Currently enrolled at, or holding a degree from, Stanford University or Harvard University.

Applicants must be currently enrolled at, or hold a degree from, Stanford University or Harvard University. This is a BELTO hiring policy; neither university sponsors, endorses or partners in this recruitment.

Applicants must be currently enrolled at, or hold a degree from, Stanford University or Harvard University. This is an independent BELTO hiring policy; neither university sponsors, endorses or partners in this recruitment.