Senior Product Security Engineer - AI & Apps

GoodLeap; United States; Remote; USD 146,000 - 170,000; Full time

Job summary

GoodLeap is seeking a Senior Product Security Engineer to partner with product and engineering teams, ensuring security by default across TypeScript, Node.js, .NET, and Python-based systems. You will split time between building security services and reviewing designs and code before merge, acting as the primary security partner for one or more business units.

You will test AI/LLM-backed features, help define what is safe to launch, and contribute to a secure consumer-finance platform with a

Qualifications

• Production backend engineering experience in at least one modern language.
• Ability to read and assess code across multiple stacks.
• Deep understanding of identity, OAuth, and auth failures.
• Experience securing REST and GraphQL APIs and contracts.
• Hands-on manual testing of web apps and APIs.

Responsibilities

• Adversarially test AI and LLM-backed features; design and run attacks and translate findings into actionable criteria.
• Build and operate production security services (APIs, streaming, interfaces) in TS/Node/.NET/Python.
• Review PRDs and designs pre-implementation to infer trust boundaries and data flows.
• Triage vulnerability findings and perform deep manual verification of high-risk paths.
• Maintain and improve SAST/IAAC tooling, secrets management, and IAM least-privilege.
• Support red-team activities and incident response for assigned products.

Job description

GoodLeap is seeking a Senior Product Security Engineer to partner with product and engineering teams, ensuring security by default across TypeScript, Node.js, .NET, and Python-based systems. You will split time between building security services and reviewing designs and code before merge, acting as the primary security partner for one or more business units.

You will test AI/LLM-backed features, help define what is safe to launch, and contribute to a secure consumer-finance platform with a