Product Security Engineer — AI & SaaS Security Lead

Assembled; San Francisco (CA); Sur place; USD 180 000 - 240 000; Plein temps

Résumé du poste

Assembled is seeking a security-focused engineer to own application security across its SaaS and AI products. You will partner with product managers and engineers to shape security practices, influence architecture, and build tooling to manage vulnerabilities from discovery through remediation and verification.

You will lead threat modeling, secure design reviews, and vulnerability management, while automating controls for secrets, access, and dependencies within CI/CD pipelines.

Qualifications

• 3+ years of hands-on application security experience
• Experience with threat modeling, security code reviews, and vulnerability remediation
• Experience writing production code or working closely with engineers to ship secure software
• Familiarity with AI tools for security investigation, testing, or remediation

Responsabilités

• Lead product and application security across SaaS and AI products
• Implement and automate controls for secrets, access, and dependency security in CI/CD
• Establish code, dependency, and secrets scanning and dynamic security testing
• Coordinate with third-party penetration testers and manage external vulnerability reporting
• Develop secure design and coding training for engineers and establish issue routing processes
• Respond to security incidents and coordinate remediation efforts
• Collaborate with Finance/Ops on SOC 2 and assurance work
• Help shape the security team roadmap and growth

Connaissances

Security engineering

Threat modeling

Vulnerability remediation

Secure design reviews

Outils

CI/CD tooling

Description du poste

Assembled is seeking a security-focused engineer to own application security across its SaaS and AI products. You will partner with product managers and engineers to shape security practices, influence architecture, and build tooling to manage vulnerabilities from discovery through remediation and verification.

You will lead threat modeling, secure design reviews, and vulnerability management, while automating controls for secrets, access, and dependencies within CI/CD pipelines.