Senior Product Security Engineer: AI-Driven SDLC & Threat Modeling

Whereby; United States; On-site; USD 121,000 - 188,000; Full time

Benefits offered by this job

Equity

London office

Remote work up to 20 days/year

ClassPass

Unlimited vacation

Apple equipment

Career growth

Flexible work culture

Job summary

Blockchain.com seeks a senior Product Security Engineer to lead the secure development lifecycle across Consumer, OTC and MRE product lines. You will own security gates for major releases, drive threat modeling and architecture reviews, and embed with product and engineering teams to translate security findings into business-prioritized remediation.

You will architect automated pipelines and risk-based remediation, mentor engineers, and define security metrics to guide leadership decisions.

Qualifications

• 4+ years in security engineering with at least 3+ years in application/product security or equivalent.
• Experience with Web, Mobile, Cloud, Infrastructure Pentests and Red Teaming.
• Proven track record shipping security automation using CodeQL/GHAS, Snyk, or similar; familiar with SARIF ecosystem and ASPM workflows.
• Expert-level ability to audit and propose fixes in Kotlin/Java, TypeScript/JS, Python; familiarity with containerised deployments (Kubernetes).
• Strong threat modeling experience and pragmatic architecture guidance for high-stakes financial flows (AuthN/AuthZ, Cryptography, Payments).
• Experience building CI checks, test harnesses and lightweight fuzzing/property tests.
• Excellent stakeholder skills — able to negotiate remediation with Engineering Directors and Product owners, balancing security with business velocity.

Responsibilities

• Strategic Security Partnership with product lines like Consumer, OTC.
• Secure SDLC Operator: CI/CD security automation, vulnerability triage workflows.
• AI-Driven SDLC Innovation: integrate AI utilities and LLM agents into secure lifecycle.
• Threat Modelling & Architecture Reviews for authentication, payments, custody flows.
• Product Security Governance & Standards: create and maintain security policies and baselines.
• Bug Bounty Leadership: oversee triage and remediation strategy.
• Release Reviews: code reviews of security-sensitive PRs and remediation guidance.
• Advanced Code Auditing: manual/automated reviews of backend Kotlin/Java.

Skills

Security engineering

App security

Kotlin/Java

TypeScript/JS

Python

Kubernetes

Threat modelling

CI/CD security

Tools

CodeQL/GHAS

Snyk

SARIF

Job description

Blockchain.com seeks a senior Product Security Engineer to lead the secure development lifecycle across Consumer, OTC and MRE product lines. You will own security gates for major releases, drive threat modeling and architecture reviews, and embed with product and engineering teams to translate security findings into business-prioritized remediation.

You will architect automated pipelines and risk-based remediation, mentor engineers, and define security metrics to guide leadership decisions.