Product Security Engineer II: Threat Modeling & Cloud

LaunchDarkly Group; Northern (KY); Hybrid; USD 116,000 - 188,000; Full time

Job summary

LaunchDarkly is hiring a Product Security Engineer II to strengthen platform security and support engineers in delivering features quickly without compromising security. You will engage in threat modeling, CNAPP triage, and SDLC tooling, collaborating with software engineers, product managers, and security colleagues.

You’ll bring security fundamentals, programming sense, and a drive to leverage AI responsibly to accelerate triage and model drafting.

Qualifications

• 2 to 4 years of full-time experience in a security-focused role.
• Experience participating in or leading threat modeling exercises (STRIDE or attack trees).
• Working knowledge of cloud security posture; CNAPP exposure is a strong plus.
• Hands-on experience applying AI tooling to security or engineering work.

Responsibilities

• Lead threat modeling engagements on features and services with risk.
• Evolve security practice from on-request to repeatable with clear criteria for engagements.
• Own triage of CNAPP findings end to end; route to service owners and close loop.
• Contribute to SDLC tooling, SAST/SCA workflows, and bug bounty triage.
• Partner with product engineering teams as a trusted reviewer and provide alternatives.

Skills

Threat modeling

CNAPP security

Cloud security

Code review

AI tooling in security

Tools

Go

Python

TypeScript

HackerOne

Bugcrowd

Job description

LaunchDarkly is hiring a Product Security Engineer II to strengthen platform security and support engineers in delivering features quickly without compromising security. You will engage in threat modeling, CNAPP triage, and SDLC tooling, collaborating with software engineers, product managers, and security colleagues.

You’ll bring security fundamentals, programming sense, and a drive to leverage AI responsibly to accelerate triage and model drafting.