Senior Product Security Engineer

Jobtailor; Austin (TX); On-site; USD 190,000 - 240,000; Full time

Job summary

Jobtailor is seeking a Senior Product/AppSec leader to autonomously drive AI-powered security innovations, architect security for distributed cloud systems, and own the vulnerability lifecycle from triage to remediation.

You will lead security reviews and threat modeling, oversee bug-bounty triage, and shape pentest scoping, partnering with engineering teams to remediate findings while mentoring junior engineers and championing secure developer practices.

Qualifications

• Senior-Level Product/AppSec Expertise in large-scale distributed cloud or SaaS.
• Hands-on AI/LLMs to solve operational challenges.
• Mastery of threat modeling methodologies (e.g., STRIDE).
• Proven track record in remediating vulnerabilities across multi-stakeholder teams.
• Strong cross-functional leadership and communication skills.

Responsibilities

• Autonomously drive AI security innovations and deploy AI-driven code analysis solutions.
• Lead security architecture and threat modeling across distributed systems.
• Own vulnerability lifecycle from triage to remediation with SLAs.
• Oversee bug bounty triage and validation, prioritizing real-world risk.
• Shape pentest scoping and act as liaison to ensure findings are remediated by engineers.

Skills

Product/AppSec Expertise

AI & Automation Engineering

Threat Modeling Methodologies

Vulnerability Lifecycle Management

Cross-Functional Leadership

Tools

Automation Scripts

Threat Modeling Tools

Job description

Responsibilities

• Autonomously Drive AI Security Innovation: Proactively identify gaps in our current capabilities and independently architect, build, and deploy AI-driven solutions to automate code analysis, optimize triage, and scale Product Security workflows.
• Security Architecture & Threat Modeling: Lead deep-dive security reviews and complex threat modeling sessions across distributed systems, embedding strict security requirements into product designs before development begins.
• Product-Focused Vulnerability Management: Own the lifecycle of product security findings. Ensure vulnerabilities are accurately triaged, mapped to the correct engineering owner, and mitigated in alignment with established SLAs.
• Bug Bounty Leadership: Oversee the technical triage and validation of Cloudflare’s external Bug Bounty program, prioritizing submissions based on real-world exploitability and business risk.
• Pentest Strategy & Support: Shape the scope of internal and external penetration testing engagements, serving as the technical liaison to ensure findings are deeply understood and remediated by development teams.
• Strategic Influence & Mentorship: Act as a force-multiplier for security across Cloudflare; mentor junior engineers, cultivate security champions within engineering organizations, and establish modern, paved-road developer guardrails.

Requirements

• Senior-Level Product/AppSec Expertise: Extensive, battle-tested experience in Product or Application Security within large-scale distributed cloud environments or SaaS platforms.
• Practical AI & Automation Engineering: Demonstrated ability to build production-grade automation scripts and tools . Must possess hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges.
• Advanced Threat Modeling & Risk Analysis: Mastery of threat modeling methodologies (e.g., STRIDE) and an analytical mindset capable of translating complex theoretical risks into prioritized, actionable business context.
• Vulnerability Lifecycle Ownership: Proven track record of managing, routing, and driving the remediation of vulnerabilities across multi-stakeholder engineering organizations while strictly enforcing SLAs.
• High Influence & Communication: Superb cross-functional leadership skills; the ability to confidently influence senior engineering leaders, resolve ownership ambiguity, and champion security initiatives without explicit authority.

Core Competencies

Demonstrates extensive expertise in Product and Application Security, with a strong focus on AI-driven solutions and vulnerability management within large-scale distributed cloud environments. Proven ability to lead security architecture initiatives, mentor engineering teams, and influence cross-functional stakeholders effectively.

Highest-signal resume keywords

• Product/Application Security Expertise
• AI & Automation Engineering
• Threat Modeling Methodologies
• Vulnerability Lifecycle Management
• Cross-Functional Leadership

ATS Optimization Keywords

Hard Skills

• AI-Driven Solutions
• Code Analysis Automation
• Threat Modeling
• Vulnerability Management
• Penetration Testing
• Automation Scripts
• Risk Analysis
• Security Architecture
• Cloud Environments
• SaaS Platforms

Soft Skills

• Influence
• Mentorship
• Communication
• Leadership
• Collaboration

Industry Keywords

• Bug Bounty Program
• Security Workflows
• Engineering Ownership
• SLAs
• Distributed Systems