Senior Product Security Engineer — AI-Driven SaaS Security

P2P; Massachusetts; On-site; USD 150,000 - 210,000; Full time

Job summary

Chainalysis is seeking a Senior Product Security Engineer to help secure our SaaS platform and AI-powered features. You will write secure code, perform reviews, and drive risk work across R&D.

This role focuses on threat modeling, design reviews, and incident response to protect blockchain data products. You will collaborate with product and platform teams to embed security into the development lifecycle, automate security checks, and lead penetration testing for new launches in a fast-paced

Qualifications

• 5+ years of application security engineering experience.
• Hands-on penetration testing of production SaaS applications.
• Experience securing internal AI/LLM platforms and coding agents.

Responsibilities

• Build Product Security across Chainalysis' SaaS offerings, partnering with product and platform engineering teams on design, code, and remediation.
• Drive Security Code Reviews for new product launches — including custom penetration tests.
• Provide security review and guardrails for internal AI platforms and coding agents (LLM gateways, prompt/response controls).
• Create threat modeling, secure design reviews, and static/dynamic code analysis across the SDLC.
• Build security automation into our CI/CD pipelines.
• Participate in a shared on-call rotation for high-severity production security incidents.

Skills

5+ years app security

Strong production coding

Security automation in CI/CD

Penetration testing

OWASP Top 10

AI/LLM security

Education

Bachelor's in CS/Engineering

Tools

Wiz

Burp Suite

SonarCloud

Terraform

Job description

Chainalysis is seeking a Senior Product Security Engineer to help secure our SaaS platform and AI-powered features. You will write secure code, perform reviews, and drive risk work across R&D.

This role focuses on threat modeling, design reviews, and incident response to protect blockchain data products. You will collaborate with product and platform teams to embed security into the development lifecycle, automate security checks, and lead penetration testing for new launches in a fast-paced