Remote Senior Product Security Engineer

Far Coder; Northern (KY); Hybrid; USD 25,000 - 40,000; Full time

Job summary

Ondo Finance is seeking a Senior Security Engineer - Product Security for a remote role in the USA. You will partner with product engineering to drive threat modeling, own secure code reviews for critical changes, and expand AppSec tooling while guiding the secure SDLC.

You will manage bug bounty scope and triage reports with engineering ownership. The role requires deep web/API security knowledge, experience across TS/JS, Python, or Go stacks, and the ability to work with wallet/signing and

Qualifications

• 5+ years in Product Security or Application Security, including senior IC time at a fast-moving product company.
• Deep secure code review skills in at least one modern stack (TypeScript / JavaScript, Python, or Go).
• Strong threat modeling skills appropriate to experience with real threat models and engineering teams.
• Practical experience owning or majorly contributing to an AppSec tooling program.
• Comfortable running or building a bug bounty / responsible disclosure program end-to-end.
• Strong working knowledge of modern web and API security—session and auth flows, OAuth and OIDC, browser security model, common web/API vulnerability classes.

Responsibilities

• Drive threat modeling for new features, integrations, and architectural changes across the product surface.
• Own secure code review for high-risk changes — authentication, session management, cryptographic paths, wallet and signing flows, RPC and third-party integrations, permission and consent surfaces.
• Expand the AppSec tooling stack and reduce false positives as a primary deliverable.
• Design and evolve the secure SDLC, including reviews, sign-offs, and validation of controls.
• Run the responsible disclosure and bug bounty program, triage and drive remediation with engineering.
• Coordinate with audit vendors and organize findings into internal risk registers and remediation plans.
• Partner with engineering leads to promote secure-by-default patterns across libraries and templates.

Skills

JavaScript

TypeScript

Terraform

CI/CD

Python

Rust

Java

Go

Blockchain

Chai

MEAN

Job description

Ondo Finance is seeking a Senior Security Engineer - Product Security for a remote role in the USA. You will partner with product engineering to drive threat modeling, own secure code reviews for critical changes, and expand AppSec tooling while guiding the secure SDLC.

You will manage bug bounty scope and triage reports with engineering ownership. The role requires deep web/API security knowledge, experience across TS/JS, Python, or Go stacks, and the ability to work with wallet/signing and