Senior AI-Driven Product Security Engineer

Function Health; Canada (KY); On-site; USD 140,000 - 210,000; Full time

Job summary

Function Health is building out a dedicated product security team. As a Senior Product Security Engineer, you'll work with engineering and product teams to embed security into every stage of development: design, code, test, and deploy.

This hands-on role focuses on risk identification, guardrails, and tooling to raise the security bar without slowing teams. You'll help advance AI-first code review, threat modeling, and secure-by-default frameworks, acting as the embedded security voice across

Qualifications

• 5+ years in product or application security or related software engineering.
• Experience building or operating AI-assisted security tooling.
• Strong Python skills; familiarity with FastAPI or LangChain is a plus.
• Deep knowledge of web and API vulnerabilities beyond OWASP Top 10.
• Bonus: HIPAA or healthcare data security experience.

Responsibilities

• Design and deploy AI-powered security agents into CI/CD: automated code review, risk classification, escalation logic, and auto-remediation where possible.
• Build and operate the security tooling layer across pipelines: SAST, SCA, secrets scanning, IaC validation, and supply chain checks.
• Conduct threat modeling, secure design reviews, and manual security assessments across apps, APIs, and infrastructure.
• Identify vulnerabilities through proactive testing and drive remediation.
• Partner with engineering teams as embedded security voice without blocking progress.
• Roll out secure-by-default development frameworks and controls.
• Connect application telemetry to detection and response systems.
• Contribute to incident response and postmortems when product security is involved.
• Shape long-term product security strategy and roadmap.

Skills

Security engineering

Python

AI tooling

Web security

Tools

SAST

SCA

IaC validation

Job description

Function Health is building out a dedicated product security team. As a Senior Product Security Engineer, you'll work with engineering and product teams to embed security into every stage of development: design, code, test, and deploy.

This hands-on role focuses on risk identification, guardrails, and tooling to raise the security bar without slowing teams. You'll help advance AI-first code review, threat modeling, and secure-by-default frameworks, acting as the embedded security voice across