Senior Product Security Engineer

7AI, Inc.; Boston (MA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

7AI, Inc. in Boston, MA is seeking a Senior Product Security Engineer to enhance security practices in product development. This hands-on role involves collaborating with engineering teams to ensure security is integrated from the start of the software development lifecycle.

The ideal candidate will have over 6 years of experience in product security and software engineering, with a strong command of secure architecture patterns and developer-facing security tools. The position is hybrid, allowing for flexible work arrangements.

Qualifications

• 6+ years of experience in software engineering or product security in cloud-native environments.
• Strong understanding of application vulnerabilities and security practices.
• Hands-on experience with security tooling and developer automation.

Responsibilities

• Define secure architecture patterns and collaborate with engineering teams.
• Build security guardrails and tools to enhance developer workflows.
• Identify and remediate security risks through hands-on investigation.

Skills

Secure application and system design

Reading and contributing to production code in Python, TypeScript, or Rust

Threat modeling

Communication skills

Collaborative work with engineering teams

Tools

SAST

CSPM

Security tooling

Job description

Careers

Senior Product Security Engineer

Location

Boston, MA

Employment Type

Full time

Location Type

Hybrid

Department

R&D

At 7AI, security is foundational to everything we build. Our customers trust us with some of their most sensitive data, and our platform must earn that trust every day.

We are seeking a Senior Product Security Engineer to join our Platform team. In this role, you will help shape how security is built into our products, platforms, and engineering workflows from day one. Rather than acting as a gatekeeper, you will partner directly with engineers, product teams, and platform teams to build secure‑by‑default systems that allow the organization to move faster with confidence.

As AI‑generated code becomes a core part of how software is developed across the company, you will help define the guardrails, tooling, and architecture patterns that enable engineers, product managers, and other builders to safely leverage AI while maintaining a strong security posture. You will work hands‑on in code, contribute to platform capabilities, and help establish security practices that scale as the company and product portfolio grow.

This is a hands‑on role for an engineer who enjoys influencing architecture, building developer‑facing systems, and solving security challenges through engineering rather than process.

Responsibilities

• Define and evolve secure architecture patterns for products, services, internal tools, and platform capabilities across 7AI.
• Partner directly with engineering teams throughout the software development lifecycle, helping design, implement, and ship secure systems.
• Build or help build security guardrails, automation, and platform capabilities that enable developers to move quickly while operating within secure boundaries.
• Operate and continuously improve our SAST, SCA, CSPM and other Prodsec tooling.
• Design and implement approaches for safely leveraging AI‑generated code, agentic workflows, and AI‑powered developer tooling.
• Collaborate with Platform and DevOps engineers to integrate security controls directly into developer workflows, CI/CD pipelines, infrastructure, and deployment systems.
• Identify security risks through architecture reviews, threat modeling, code review, and hands‑on investigation, then work alongside engineers to remediate them.
• Contribute code, prototypes, tooling, and platform services that improve security across the engineering organization.
• Help define security standards, engineering practices, and development workflows that can scale with the company as we grow.
• Serve as a trusted technical partner to engineering teams, helping balance security, usability, and delivery velocity.
• Participate in customer and partner security discussions when deep technical expertise is needed.

Requirements

• 6+ years of software engineering, security engineering, or product security experience in modern cloud‑native environments.
• Strong understanding of secure application and system design, including authentication, authorization, secrets management, software supply chain security, and common application vulnerabilities.
• Comfortable reading, reviewing, and contributing production code in at least two of Python, TypeScript, or Rust.
• Experience implementing and tuning SAST, SCA, dependency management, CSPM, and other security tooling.
• Experience designing security controls and secure development workflows that integrate directly into engineering processes.
• Hands‑on experience building developer tooling, platform services, automation, or infrastructure that improves security outcomes.
• Strong threat modeling and architectural reasoning skills, with the ability to translate security concerns into practical engineering solutions.
• Ability to work collaboratively with product, platform, and engineering teams and influence decisions through technical credibility.
• Excellent written and verbal communication skills.
• Ability to balance security rigor with engineering velocity in a fast‑moving product environment.

Nice to Have

• Experience securing AI platforms, LLM‑powered applications, agentic systems, or AI‑assisted software development workflows.
• Experience building internal developer platforms, engineering enablement systems, or platform engineering capabilities.
• Familiarity with AWS, GCP, or Azure cloud environments.
• Experience contributing to security tooling, open‑source projects, developer infrastructure, or platform services.
• Experience in high‑growth startups where pragmatism, ownership, and execution matter more than organizational boundaries.