Senior AI Security Engineer - Product Security (Remote)

Colossus Technologies Group; United States; On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Remote work (US)

Job summary

Colossus Technologies Group is seeking a hands-on Senior/Staff Product Security Engineer to embed security into products from design through CI/CD. You will work with software engineers on secure architecture, perform deep security assessments, and build tooling to scale security across engineering teams.

This role blends application security with software engineering, requiring strong scripting and modern web/API knowledge.

Qualifications

• 5+ years of hands-on application, product or software security experience.
• Strong software engineering or scripting ability.
• Experience building security tooling rather than exclusively operating commercial products.
• Strong understanding of modern web applications, APIs and cloud-native architectures.
• Experience with threat modeling, secure code review and offensive application testing.
• Ability to work directly with senior software engineers on complex technical problems.

Responsibilities

• Threat modeling and security architecture reviews for new products and services.
• Hands-on code review, vulnerability research and application penetration testing.
• Building internal security tooling and automation in Python, Go or similar languages.
• Developing automated approaches to vulnerability discovery and remediation.
• Improving SAST, DAST and software supply-chain security.
• Security controls and tooling integrated into CI/CD and the SDLC.
• Applying AI/agentic systems to security engineering, code analysis and security automation.
• Partnering directly with engineering teams to develop secure-by-default patterns.

Skills

Security tooling

Threat modeling

Secure code review

Python

Go

CI/CD security

Cloud-native architectures

Tools

AWS

Kubernetes

CI/CD tools

Job description

Colossus Technologies Group is seeking a hands-on Senior/Staff Product Security Engineer to embed security into products from design through CI/CD. You will work with software engineers on secure architecture, perform deep security assessments, and build tooling to scale security across engineering teams.

This role blends application security with software engineering, requiring strong scripting and modern web/API knowledge.