Senior AI Security Engineer — AI-Driven CI/CD Security Remote

Function Health; United States; Remote; USD 140,000 - 180,000; Full time

Job summary

Function Health is building a dedicated product security team to embed security into every stage of development. As a Senior Product Security Engineer, you will design AI-powered security agents, automate code reviews, and enforce security across CI/CD pipelines while partnering with software engineers to maintain speed and quality.

You will shape the security roadmap, perform threat modeling, and implement robust controls, influencing our shift toward AI-assisted engineering and proactive

Qualifications

• 5+ years of experience in product or application security, software engineering, or a combination of both.
• Built or operated AI-assisted security tooling, whether that's an agent doing code review, an automated triage pipeline, or custom security automation you designed from scratch.
• Strong Python experience. Familiarity with FastAPI, LangChain, or agentic frameworks is a plus.
• Deep fluency in identifying and exploiting web, API, and application vulnerabilities, well beyond OWASP Top 10.
• Experience embedding security into CI/CD, not just recommending it.
• You can guide engineers through secure design decisions without slowing them down.
• Bonus: experience with HIPAA or healthcare data, red teaming, or security architecture at scale.

Responsibilities

• Design and deploy AI-powered security agents into CI/CD: automated code review, risk classification, escalation logic, and where possible, auto-remediation.
• Build and operate the security tooling layer across our pipelines: SAST, SCA, secrets scanning, IaC validation, and supply chain integrity checks.
• Conduct threat modeling, secure design reviews, and manual security assessments across our apps, APIs, and infrastructure.
• Find vulnerabilities through proactive testing, not just scanner output, and drive them to remediation.
• Partner with engineering teams across our product pillars as the embedded security voice in the room, without being a blocker.
• Own the rollout of secure‑by‑default development frameworks and controls.
• Connect application‑level telemetry to detection and response systems.
• Contribute to incident response and postmortems when product security is involved.
• Shape our long‑term product security strategy and roadmap.

Skills

Security experience

AI tooling

Python

API security

CI/CD security

Documentation

Tools

SAST

SCA

Secrets scanning

IaC validation

Job description

Function Health is building a dedicated product security team to embed security into every stage of development. As a Senior Product Security Engineer, you will design AI-powered security agents, automate code reviews, and enforce security across CI/CD pipelines while partnering with software engineers to maintain speed and quality.

You will shape the security roadmap, perform threat modeling, and implement robust controls, influencing our shift toward AI-assisted engineering and proactive