Senior Product Security Engineer: AI-Driven Secure-by-Design

Iru; Miami (FL); Hybrid; USD 140,000 - 175,000; Full time

Benefits offered by this job

Hybrid work environment

Medical + dental + vision coverage

401(k) with company match

Paid time off (PTO)

Job summary

Iru is seeking a highly technical Senior Product Security Engineer to embed security into the product development lifecycle. This is a hands-on role that partners with Engineering, Cloud Security, Infrastructure, Compliance and Product Management to ensure security is integrated throughout the SDLC while enabling developer velocity.

You will conduct threat modeling, reviews, security testing (SAST/DAST), secure code reviews, and build secure-by-design patterns; drive adoption of secure coding

Qualifications

• 5+ years in Product Security or Application Security.
• Strong understanding of modern application architectures.
• Experience securing web apps, APIs, microservices and cloud-native apps.
• Experience performing threat modeling.
• Experience conducting penetration testing.
• Knowledge of OWASP Top 10 & API Top 10, OAuth/OIDC, and secure SDLC.
• Experience with SAST, DAST, SCA, and container security.
• Proven ability to partner with engineering teams.
• Excellent written and verbal communication skills.

Responsibilities

• Embed security into engineering workflows while maintaining velocity.
• Perform security design and architecture reviews for new products.
• Conduct threat modeling for applications, APIs and AI-enabled services.
• Review security posture across the SDLC and prioritize remediation.
• Lead vulnerability remediation with cross-functional teams.
• Assess AI-enabled products for security risks and secure AI patterns.
• Drive adoption of secure coding practices and CI/CD security tooling.
• Collaborate with Product, Engineering, Cloud Security, and Compliance.

Skills

Product Security

Application Security

Threat Modeling

Penetration Testing

Security Reviews

CI/CD Security

Security Automation

Cloud Security

API Security

Team Collaboration

Tools

Snyk

Burp Suite Pro

Semgrep

Wiz

GitHub Advanced Security

Kubernetes

GitHub Actions

Job description

Iru is seeking a highly technical Senior Product Security Engineer to embed security into the product development lifecycle. This is a hands-on role that partners with Engineering, Cloud Security, Infrastructure, Compliance and Product Management to ensure security is integrated throughout the SDLC while enabling developer velocity.

You will conduct threat modeling, reviews, security testing (SAST/DAST), secure code reviews, and build secure-by-design patterns; drive adoption of secure coding