Senior Product Security Engineer — AI & AppSec

GoodLeap, LLC; Northern (KY); Hybrid; USD 146,000 - 170,000; Full time

Job summary

GoodLeap, LLC is seeking a Senior Product Security Engineer to partner with product and engineering teams, balancing security by default with rapid delivery. You will design and test AI/LLM features, review designs before code exists, and own product security outcomes for multiple business units.

You will operate security tooling across TS, Node.js, .NET, and Python stacks. You will lead manual testing of web apps and APIs, triage findings, and help set the AI security bar while collaborating

Qualifications

• Experience shipping production code in at least one modern language.
• Ability to read code in multiple languages and assess findings.
• Understanding of identity, authorization, and OAuth pitfalls.
• Familiarity with API security, REST/GraphQL, and schema contracts.
• Hands-on testing of web apps and APIs, manually and with tooling.
• Experience with AWS and infrastructure as code.
• Practical exposure to AI/LLM security and adversarial testing.
• Ability to explain findings to engineers, product managers, and legal.

Responsibilities

• Adversarially test AI and LLM features; design and run attacks; convert findings to actionable criteria.
• Build and operate production security services and internal tooling across TS/Node.js/.NET/Python stacks.
• Automate repetitive security tasks and evaluate new tooling for efficiency.
• Review PRD designs and data flows to identify trust boundaries and risk.
• Triage vulnerability findings and perform deep manual analysis on high-risk paths.
• Maintain and improve IAM, secrets management, and infrastructure security.
• Educate engineers with security training and accessible documentation.

Job description

GoodLeap, LLC is seeking a Senior Product Security Engineer to partner with product and engineering teams, balancing security by default with rapid delivery. You will design and test AI/LLM features, review designs before code exists, and own product security outcomes for multiple business units.

You will operate security tooling across TS, Node.js, .NET, and Python stacks. You will lead manual testing of web apps and APIs, triage findings, and help set the AI security bar while collaborating