Senior Product Security Engineer, AI & Cloud

SportsTechJobs; San Francisco, New York, Chicago (CA, NY, IL); On-site; USD 200,000 - 245,000; Full time

Job summary

Komodo Health seeks a Senior Security Engineer for Product Security to own the security of how Komodo builds, ships and deploys software across GitHub, CI/CD pipelines, SAST, SCA, DAST, and AI features. You will collaborate with Engineering and the Forward Deployed Engineering team to reduce risk and strengthen the software supply chain.

You will lead threat modeling, design reviews, and automated remediation, driving guardrails and secure defaults while enabling fast, secure product delivery in

Qualifications

• 6+ years in software or security engineering, 3+ in application security, shipping production code in Python/TypeScript/Go/Java.
• Hands-on GitHub Actions at scale with reusable workflows, OIDC, secrets, runners; defend pipelines from attacks.
• Experience with SAST/DAST/DAST, SCA prioritization by reachability and exploitability.
• Penetration testing of web apps/APIs; OWASP Top 10 and API Security Top 10 mastery.
• Experience securing AI-enabled products; LLM threats and prompt-injection basics.
• Threat modeling and secure design reviews of services and AI features.

Responsibilities

• Own the application security toolchain and CI/CD security controls.
• Build security automation with Python/TypeScript and GitHub Actions.
• Run threat models and design reviews for new services and AI features.
• Improve security engagement across the product lifecycle and align with Engineering and FDE teams.
• Scope penetration tests and validate fixes; maintain audit-ready SDLC controls.

Skills

Engineering depth

GitHub Actions

SAST & SCA

Penetration testing

AI security

Threat modeling

Cloud security

Multi-cloud

Collaboration

Job description

Komodo Health seeks a Senior Security Engineer for Product Security to own the security of how Komodo builds, ships and deploys software across GitHub, CI/CD pipelines, SAST, SCA, DAST, and AI features. You will collaborate with Engineering and the Forward Deployed Engineering team to reduce risk and strengthen the software supply chain.

You will lead threat modeling, design reviews, and automated remediation, driving guardrails and secure defaults while enabling fast, secure product delivery in