Senior Product Security Engineer: AI/Cloud (Remote)

Iru, Inc.; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Iru, Inc. is seeking a highly technical Senior Product Security Engineer for a 6-month contract (40 hours/week) to embed security into the product development lifecycle. This hands-on role identifies security risks early, partnering with development teams on remediation and performing security reviews.

You will conduct security testing, help build secure-by-design products, and collaborate with Engineering, Cloud Security, Compliance, and Product Management to scale secure development at pace.

Qualifications

• 5+ years in Product Security or Application Security.
• Strong understanding of modern application architectures.
• Experience securing Web apps, APIs, microservices, and cloud-native apps.
• Experience performing threat modeling.
• Experience conducting penetration testing.
• Strong understanding of OWASP Top 10, OAuth/OIDC, and secure SDLC.

Responsibilities

• Perform security design and architecture reviews for new products and features.
• Conduct threat modeling for applications, APIs, and AI-enabled services.
• Review application security posture throughout the SDLC.
• Partner with engineering teams to prioritize and remediate vulnerabilities.
• Review authentication, authorization, and access control implementations.
• Perform manual web, API, thick-client, and mobile app penetration testing.
• Validate findings from third-party penetration tests.
• Conduct secure code reviews.
• Verify remediation of security vulnerabilities.
• Drive adoption of secure coding practices.
• Partner with developers to improve security throughout the SDLC.
• Help define Product Security standards and engineering guardrails.
• Develop reusable security patterns and reference architectures.
• Triage findings from SAST, DAST, SCA, container scanning, and cloud security tools.
• Work with engineering teams to prioritize remediation.
• Track remediation SLAs and security metrics.
• Assess AI-enabled products for security risks.
• Review LLM integrations and AI workflows.
• Test AI applications for prompt injection, data leakage, insecure tool use, model abuse, and authorization weaknesses.
• Help define secure AI engineering standards.
• Improve automation of security testing throughout CI/CD.
• Integrate security tooling into developer workflows.
• Build scripts and tooling that reduce manual security work.
• Collaborate with Product, Engineering, Infrastructure, Cloud Security, and Compliance teams.
• Support customer security questionnaires related to product security.
• Assist Sales Engineering with security discussions when needed.

Skills

Product Security

Threat Modeling

Penetration Testing

OWASP Top 10

CI/CD Security

Security Automation

Communication

Tools

Snyk

Burp Suite Pro

Semgrep

Wiz

GitHub Advanced Security

Job description

Iru, Inc. is seeking a highly technical Senior Product Security Engineer for a 6-month contract (40 hours/week) to embed security into the product development lifecycle. This hands-on role identifies security risks early, partnering with development teams on remediation and performing security reviews.

You will conduct security testing, help build secure-by-design products, and collaborate with Engineering, Cloud Security, Compliance, and Product Management to scale secure development at pace.