Product Security Engineer - Threat Modeling & Secure SDLC

LaunchDarkly; West Saint Paul (MN); On-site; USD 116,000 - 159,000; Full time

Job summary

LaunchDarkly's Product Security team is hiring a Product Security Engineer to strengthen how we secure the platform engineers build with every day. You'll bring depth in security fundamentals and program design as a member of a small, high-leverage team with strong engineering instincts.

You'll focus on threat modeling and cloud security posture, with rotating exposure to the ProdSec surface area. Your work will help developers move fast without sacrificing security, through automation,

Qualifications

• 2 to 4 years of full-time experience in a security-focused role (AppSec/ProdSec/cloud security preferred).
• Comfortable reading and critiquing PRs in a modern stack; may write small tools when helpful.
• Experience leading or participating in threat modeling exercises (STRIDE, attack trees, or equivalent).
• Working knowledge of cloud security posture; CNAPP exposure is a strong plus.
• Strong fundamentals: OWASP Top 10, authn/authz patterns, secrets management, and common cloud misconfigurations.
• Hands-on experience applying AI tooling to security or engineering work.

Responsibilities

• Lead threat modeling engagements on features and services where risk warrants it.
• Collaborate with ProdSec lead to make threat modeling repeatable with clear criteria.
• Own triage of CNAPP findings end to end; identify systemic fixes.
• Contribute to SDLC tooling, SAST/SCA workflows, and bug bounty triage.
• Partner with engineers as a trusted reviewer; explain decisions and propose paths forward.
• Apply AI to triage, summarize findings, draft threat models, scan code, and reduce toil.
• Improve documentation and tooling to prevent incidents and raise the security floor.

Skills

Threat modeling

Cloud security

AI tooling in security

Engineering collaboration

Problem solving

Tools

Go

Python

TypeScript

SAST/SCA tooling

CNAPP

Job description

LaunchDarkly's Product Security team is hiring a Product Security Engineer to strengthen how we secure the platform engineers build with every day. You'll bring depth in security fundamentals and program design as a member of a small, high-leverage team with strong engineering instincts.

You'll focus on threat modeling and cloud security posture, with rotating exposure to the ProdSec surface area. Your work will help developers move fast without sacrificing security, through automation,