Remote Senior Product Security Engineer - Threat Modeling

Ondo; Northern (KY); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Ondo Finance is seeking a Senior Security Engineer - Product Security. This hands-on IC role partners with product engineering to drive threat modeling, perform secure code reviews, and maintain AppSec tooling to keep products secure by default.

You'll own the bug bounty program, contribute to the security lifecycle, and work closely with SecOps and Infrasec. The role supports a remote US work model and requires strong risk-focused engineering practices.

Qualifications

• Experience driving threat modeling for product features and architecture.
• Hands-on secure code review for high-risk changes (auth, crypto, wallets, RPC).
• Experience expanding AppSec tooling and reducing false positives.
• Ability to drive secure SDLC within engineering teams.

Responsibilities

• Drive threat modeling for new features and architectural changes across the product surface.
• Own secure code review for high-risk changes including authentication, session management, cryptographic paths, wallet and signing flows.
• Expand AppSec tooling and reduce false positives; explore AI-native integrations.
• Design and evolve our secure SDLC and determine triggers for security reviews.

Skills

Threat modeling

Secure code reviews

AppSec tooling

SSDLC

AI-native security

Job description

Ondo Finance is seeking a Senior Security Engineer - Product Security. This hands-on IC role partners with product engineering to drive threat modeling, perform secure code reviews, and maintain AppSec tooling to keep products secure by default.

You'll own the bug bounty program, contribute to the security lifecycle, and work closely with SecOps and Infrasec. The role supports a remote US work model and requires strong risk-focused engineering practices.