Senior Product Security Engineer - AI & AppSec Leader

Coinscapture; Northern (KY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

GoodLeap, a technology company delivering financing and software for sustainable solutions, is seeking a Senior Product Security Engineer. You will partner with product and engineering teams to ensure safe-by-default software, building security services and reviewing designs before code exists.

You will work across TypeScript, Node.js, .NET, and Python, and help ship AI-enabled features with rigorous security standards, including adversarial testing and risk assessment.

Qualifications

• Proven backend development across one modern language and at least one production service.
• Ability to read and evaluate code in multiple languages for security issues.
• Strong understanding of identity, authorization, token handling, and OAuth concepts.
• Practical experience securing REST and GraphQL APIs and applying API contracts.
• Hands-on security testing of web apps and APIs, including manual techniques.

Responsibilities

• Adversarially test AI/LLM-backed features and translate findings into actionable fixes.
• Build and operate production security services and tooling across TS/Node.js/.NET/Python.
• Automate repetitive security tasks and improve processes.
• Triage and validate vulnerability findings from scanners and AI-assisted reviews.
• Threat model product designs by reviewing PRDs and data flows before coding starts.
• Manual testing of web apps and APIs and retesting fixes after remediation.
• Maintain and tune AppSec tooling estate, including SAST and dependency scanning.
• Ensure IAM least-privilege and secrets management in infrastructure as code.
• Create security training and documentation for engineers to use.
• Evaluate security tools through bake-offs against defined requirements.

Skills

Backend engineering

Multi-language proficiency

Identity & authorization security

API security

Manual security testing

AWS & IaC

AI/LLM security basics

Tools

OpenAPI

SAST tooling

CI/CD tooling

Infrastructure as Code

Job description

GoodLeap, a technology company delivering financing and software for sustainable solutions, is seeking a Senior Product Security Engineer. You will partner with product and engineering teams to ensure safe-by-default software, building security services and reviewing designs before code exists.

You will work across TypeScript, Node.js, .NET, and Python, and help ship AI-enabled features with rigorous security standards, including adversarial testing and risk assessment.