Product Security Engineer — Remote, Equity & Impact

Oneleet; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health & wellness benefits

20 days PTO + 8 holidays

Remote work culture

Team off-sites

Competitive compensation & equity

Job summary

Oneleet is hiring an Application Security Engineer to own the security judgment layer of our cybersecurity platform. You will collaborate with product engineering to integrate, tune, and present findings that are meaningful to customers, balancing depth with usability.

We value self-starters who thrive in ambiguity and prioritize actionable security insights. The role involves direct customer interaction, cross-functional collaboration, and shaping the platform's security posture at startup

Qualifications

• 5+ years of application security experience, including shipping security products.
• Strong programming skills in Go, Python, or TypeScript; product engineering focus.
• Hands-on experience tuning security tooling for production use.
• Understanding of vulnerability research, CVE/CWE taxonomy, and exploit reasoning.
• Excellent communication and ability to work directly with customers.

Responsibilities

• Own the integration, configuration, and output quality of security tooling powering the platform.
• Tune outputs to maximize signal and minimize noise; decide what to surface, suppress, or enrich.
• Design rules, severity scoring, and triage flows to make findings actionable.
• Build the security judgment layer on top of tooling with context-aware prioritization.
• Partner with engineers on UI presentation and remediation flows; align with PM/design roadmap.
• Engage with customers to understand needs and iterate quickly on feedback.
• Review and shape architectural choices affecting security outcomes.
• Benchmark output quality against competitors and close gaps.

Skills

Application security

Go/Python/TypeScript

Vulnerability research

Security tooling tuning

Customer communication

Startup experience

Tools

OSS tooling

LLM agents

Job description

Oneleet is hiring an Application Security Engineer to own the security judgment layer of our cybersecurity platform. You will collaborate with product engineering to integrate, tune, and present findings that are meaningful to customers, balancing depth with usability.

We value self-starters who thrive in ambiguity and prioritize actionable security insights. The role involves direct customer interaction, cross-functional collaboration, and shaping the platform's security posture at startup