Senior AI-Driven Product Security Engineer

Function Health; United States; Remote; USD 180,000 - 235,000; Full time

Benefits offered by this job

Competitive salary

Flexible hours

Benefits package

Job summary

Function Health is seeking a Senior Product Security Engineer in the United States to embed security across design, code, test, and deployment. You will build AI-powered security agents, integrate security gates, and raise the security bar without slowing teams.

You will collaborate with engineering and product teams, perform threat modeling, secure design reviews, and proactive testing, helping shape the long-term security strategy and secure-by-default frameworks.

Qualifications

• 5+ years in product or application security or software engineering.
• Experience building or operating AI-assisted security tooling.
• Strong Python experience; knowledge of FastAPI or LangChain a plus.

Responsibilities

• Design and deploy AI-powered security agents into CI/CD pipelines.
• Build and operate the security tooling layer across pipelines (SAST/SCA, secrets).
• Conduct threat modeling, secure design reviews, and security assessments.
• Proactively find vulnerabilities and drive remediation.
• Partner with engineering as the embedded security voice without blocking.
• Roll out secure-by-default frameworks and controls.
• Connect telemetry to detection and response systems.
• Contribute to incident response and postmortems.
• Shape long-term product security strategy and roadmap.

Skills

AI-powered tooling

Python

CI/CD security

Web/API security

Documentation

Tools

SAST

SCA

IaC validation

Secrets scanning

Job description

Function Health is seeking a Senior Product Security Engineer in the United States to embed security across design, code, test, and deployment. You will build AI-powered security agents, integrate security gates, and raise the security bar without slowing teams.

You will collaborate with engineering and product teams, perform threat modeling, secure design reviews, and proactive testing, helping shape the long-term security strategy and secure-by-default frameworks.