Product Security Engineer: Threat Modeling & AI

Cervin; Northern (KY); On-site; USD 123,000 - 188,000; Full time

Benefits offered by this job

RSUs

Health insurance

Vision insurance

Dental insurance

Mental health benefits

Job summary

LaunchDarkly’s Product Security team is hiring a Product Security Engineer II to strengthen security for the platform engineers build every day. You’ll lead threat modeling engagements, own CNAPP triage, and contribute to SDLC tooling while leveraging AI to accelerate security work.

You’ll collaborate with software engineers, product managers, and other security engineers, champion secure patterns, and push for durable improvements that prevent incidents over time.

Qualifications

• 2 to 4 years of full-time experience in a security-focused role (AppSec/ProdSec or cloud security preferred).
• Comfortable reading and critiquing pull requests in a modern stack; write small tools when it helps.
• Experience participating in or leading threat modeling exercises (STRIDE, attack trees, or equivalent).
• Working knowledge of cloud security posture; exposure to CNAPP is a strong plus.
• Strong fundamentals: OWASP Top 10, authentication/authorization patterns, secrets management, common cloud misconfigurations.
• Hands-on experience applying AI tooling to security or engineering work.

Responsibilities

• Lead threat modeling engagements on features and services where risk warrants it.
• Evolve the practice from on-request to repeatable with clear criteria for engagements.
• Own day-to-day triage of CNAPP findings end to end; investigate, prioritize, route to owners, close loop.
• Contribute to SDLC tooling, SAST/SCA workflows, and bug bounty triage as needed.
• Partner with product engineering teams as a trusted reviewer; explain the why and propose paths forward.
• Bring AI to the work to accelerate triage, summarize findings, draft threat models, scan code, and reduce toil.
• Push the security floor up over time through documentation, office hours, small tooling improvements.

Skills

Threat modeling

CNAPP

SAST/SCA

AI tooling

Go

Python

TypeScript

Tools

Cloud security posture

PR review

Job description

LaunchDarkly’s Product Security team is hiring a Product Security Engineer II to strengthen security for the platform engineers build every day. You’ll lead threat modeling engagements, own CNAPP triage, and contribute to SDLC tooling while leveraging AI to accelerate security work.

You’ll collaborate with software engineers, product managers, and other security engineers, champion secure patterns, and push for durable improvements that prevent incidents over time.