Remote Senior Product Security Engineer: AI & Cloud

Envestnet; Missouri; Remote; USD 126,000 - 157,000; Full time

Job summary

Envestnet is seeking a Senior Product Security Engineer to embed secure design across WealthTech platforms. You will partner with product, software engineering, architecture and infrastructure to identify and mitigate security risks early in the product lifecycle.

You will lead the implementation and operation of application security tooling (SAST/DAST/SCA/IAC), conduct threat modeling, and drive secure SDLC practices, including AI/LLM security governance and API security standards.

Qualifications

• Experience with application security tooling and automation.
• Threat modeling, architecture reviews, and vulnerability management.
• Experience with AI/LLM security and AI-SDLC.
• API security and MCP governance familiarity.
• Proficiency in Python, Go, PowerShell.
• Ability to collaborate with product, engineering and security teams.

Responsibilities

• Identify and mitigate security risks early in the product lifecycle.
• Perform threat modeling and security reviews.
• Lead automated web app security scans using SAST/DAST tools.
• Perform code reviews to ensure secure coding practices.
• Collaborate with teams to remediate vulnerabilities in applications, APIs and cloud services.
• Develop AI/SDLC governance and security guardrails for AI-assisted development.

Skills

Application security

DevSecOps

Threat modeling

Vulnerability management

Secure coding practices

Python

Go

PowerShell

Automation scripting

Tools

SAST

DAST

SCA

IAC security

Secrets detection

Job description

Envestnet is seeking a Senior Product Security Engineer to embed secure design across WealthTech platforms. You will partner with product, software engineering, architecture and infrastructure to identify and mitigate security risks early in the product lifecycle.

You will lead the implementation and operation of application security tooling (SAST/DAST/SCA/IAC), conduct threat modeling, and drive secure SDLC practices, including AI/LLM security governance and API security standards.