Remote Product Security Engineer: Secure SDLC Leader

SailPoint; United States; Remote; USD 145,000 - 245,000; Full time

Benefits offered by this job

Health and wellness coverage: Medical,

Dental and vision insurance

Disability coverage: Short-term and LT

Life insurance and AD&D

401(k) with company match

Flexible vacation policy

8 paid holidays annually

Parental leave

Job summary

SailPoint is seeking a Product Security Engineer to partner with engineering teams across the SDLC to identify and mitigate security risks and embed secure-by-design practices. You will drive threat modeling, secure coding standards, and risk-based remediation while collaborating with EPS and CPS teams.

The role emphasizes AI-assisted security tooling, scalable remediation workflows, and security training to enable product teams. Remote within the continental US; competitive base compensation.

Qualifications

• 4-5 years of experience in product security, application security, software engineering, or a related field.
• Experience with security testing tools such as SAST, SCA, DAST, Container security scanners.
• Experience with CI/CD security controls and DevSecOps practices.
• Familiarity with programming languages such as Python, Go, Java, JavaScript/TypeScript, Ruby.
• Demonstrated ability to effectively use AI-powered tools and automation to enhance security engineering productivity, research, analysis, and remediation efforts.
• Knowledge of emerging AI security risks and best practices for securing AI-enabled applications, services, and development workflows.
• Deep expertise in threat modeling, secure architecture design, and vulnerability management.
• Experience influencing engineering organizations and driving security initiatives across multiple teams.
• Knowledge of AI security frameworks is strongly preferred (OWASP AI Security and Privacy Guide, NIST AI RMF, CAI, Open SSF AI/ML Security Framework).

Responsibilities

• Partner with Engineering teams throughout the software development lifecycle to identify and mitigate security risks, and implement secure deployment practices.
• Support threat modeling activities and help engineering teams implement appropriate security controls.
• Define and promote secure coding standards, security policies, best practices, and secure-by-design principles.
• Participate in the Cyber organization’s efforts to leverage AI across the team, as well as the use of AI in our SSDLC.
• Partner with Engineering on improving security testing programs.
• Coordinate internal and external application and penetration testing initiatives.
• Validate vulnerability findings and prioritize remediation based on risk.
• Perform root cause analysis and recommend long-term security improvements.
• Collaborate with the Security Operations team on security monitoring and detection capabilities for applications and services.
• Triage, coordinate, and oversee remediation for security researcher disclosures via our bug bounty program.
• Develop security training, guidance, and technical documentation.
• Interact with other organizations at SailPoint as a consultant on security-related matters.

Skills

SAST

SCA

DAST

Container security

DevSecOps

Python

Go

Java

JavaScript/TypeScript

Ruby

AI-powered tools

Threat modeling

Secure architecture

Vulnerability management

Security influence

Tools

CI/CD tooling

Kubernetes

Job description

SailPoint is seeking a Product Security Engineer to partner with engineering teams across the SDLC to identify and mitigate security risks and embed secure-by-design practices. You will drive threat modeling, secure coding standards, and risk-based remediation while collaborating with EPS and CPS teams.

The role emphasizes AI-assisted security tooling, scalable remediation workflows, and security training to enable product teams. Remote within the continental US; competitive base compensation.