Remote Product Security Engineer | Ownership & IR

group-surge; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Surge is seeking a hands-on Security Engineer to own product security operations and strengthen the application security posture for customer-facing products. This role is remote, full-time, and an early dedicated hire within the security function.

You will collaborate with Engineering, Product, DevOps, Fraud, and leadership to implement secure-by-design solutions, perform threat modelling, conduct reviews, and drive security tooling and automation.

Qualifications

• Experience as a Security Engineer or similar role.
• Strong background in application security and secure SDLC.
• Experience with cloud (AWS) and container security.

Responsibilities

• Own security processes across critical product workflows and user journeys.
• Detect, investigate, and respond to fraud attempts, abuse patterns, and security incidents.
• Analyze logs, behaviours, and signals to identify threats and emerging issues.
• Conduct threat modelling exercises and recommend security enhancements.
• Collaborate with Product and Engineering to implement secure-by-design solutions.
• Perform application security reviews and identify business logic vulnerabilities.
• Support incident response activities, including root cause analysis and remediation planning.
• Develop and enhance security tooling, monitoring, and automation capabilities.
• Contribute to the evolution of the organisation's security operations framework.

Skills

Python

Go

Node.js

Java

PHP

OWASP Top 10

Threat modelling

SAST/DAST

AWS

Container security

Secure-by-design

Tools

SAST tools

DAST tools

CI/CD tooling

AWS security tooling

Job description

Surge is seeking a hands-on Security Engineer to own product security operations and strengthen the application security posture for customer-facing products. This role is remote, full-time, and an early dedicated hire within the security function.

You will collaborate with Engineering, Product, DevOps, Fraud, and leadership to implement secure-by-design solutions, perform threat modelling, conduct reviews, and drive security tooling and automation.