Senior Product Security Engineer - AI & Cloud (Remote)

VulnU; United States; Hybride; USD 174 000 - 245 000; Plein temps

Avantages offerts par ce poste

Flexible PTO

Retirement match

Equity

Résumé du poste

Komodo Health is seeking a Senior Security Engineer in Product Security to own the security toolchain, build automation, and lead threat modeling for core services and AI features. You will work with Engineering and FDE to reduce risk and improve secure delivery across our software lifecycle.

You will apply hands-on security testing, ensure secure defaults, and drive scalable processes for vulnerability management and incident response while partnering with teams across the product stack.

Qualifications

• 6+ years in software or security engineering, with 3+ years in application security.
• Production code experience in Python, TypeScript, Go or Java.
• Hands-on GitHub Actions at scale with reusable workflows and secrets management.
• SAST and SCA scanning across many repositories with custom rules.
• Penetration testing and DAST of web apps and APIs, OWASP Top 10 oriented.
• AI security for LLM applications and AI agents, with secure design practices.
• Threat modeling using STRIDE and MAESTRO frameworks.
• Cloud security across AWS, GCP or Azure, including IAM and IaC.

Responsabilités

• Own the application security toolchain (SAST, SCA, container and secret scanning, DAST): configuration and rules.
• Build security automation in Python or TypeScript and GitHub Actions; policy-as-code checks.
• Run threat models and design reviews for new services and AI features; review risky PRs.
• Improve security engagement across the product lifecycle with engineering teams.
• Reduce engineering friction and ensure timely security remediation.
• Scope penetration tests, validate findings and verify fixes.
• Evaluate AI security tooling and coach engineers on secure LLM patterns.
• Keep SOC 2 controls and vulnerability management audit-ready; participate in on-call rotation.

Connaissances

Engineering depth

GitHub Actions

SAST

DAST

Threat modeling

AI security

Cloud security

Outils

GitHub

CI/CD

Secrets management

OWASP ZAP

Description du poste

Komodo Health is seeking a Senior Security Engineer in Product Security to own the security toolchain, build automation, and lead threat modeling for core services and AI features. You will work with Engineering and FDE to reduce risk and improve secure delivery across our software lifecycle.

You will apply hands-on security testing, ensure secure defaults, and drive scalable processes for vulnerability management and incident response while partnering with teams across the product stack.