Senior Product Security Engineer — AI/LLM Security

Openkrill; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

GoodLeap is seeking a Senior Product Security Engineer to partner with product and engineering teams, building security into services and features by default. The role combines hands-on security testing with designing secure production services across TypeScript, Node.js, .NET, and Python.

You will review designs, triage vulnerabilities, and help set security standards for AI/agent systems while enabling teams to ship safely in a regulated consumer-finance product.

Qualifications

• Shipped production backend code in at least one modern language.
• Read and judge findings across multiple languages and stacks.
• Ability to perform threat modeling from PRDs and designs.
• Hands-on testing of web apps and APIs beyond automated scanners.

Responsibilities

• Adversarial test AI and LLM-backed features; design and run attacks.
• Build and operate production security services and tooling.
• Automate manual tasks where feasible and justify tool replacements.
• Review vulnerability findings in PRs; perform deep triage on high-risk changes.
• Threat-model from product designs before code exists; map trust boundaries.

Skills

Backend engineering

Threat modeling

Manual testing

Code review

Security testing

Security communication

Tools

AWS

OpenAPI

SAST/SCA

Job description

GoodLeap is seeking a Senior Product Security Engineer to partner with product and engineering teams, building security into services and features by default. The role combines hands-on security testing with designing secure production services across TypeScript, Node.js, .NET, and Python.

You will review designs, triage vulnerabilities, and help set security standards for AI/agent systems while enabling teams to ship safely in a regulated consumer-finance product.