Senior Product Security Engineer: AI–SaaS Focus

chainalysis-careers; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Chainalysis is seeking a Senior Product Security Engineer to be hands-on across one or more product areas, performing security reviews, penetration tests, and shipping fixes directly into product repos while driving SOC2 and risk framework work across R&D - Engineering.

You will work with AI-powered products at the intersection of blockchain data, AI and security, defending a SaaS platform used by governments, banks, and crypto exchanges.

Qualifications

• 5+ years of application security engineering experience.
• Strong production coding ability in Java, TypeScript/JavaScript, Python, or Go to perform code reviews and fixes.
• Experience building security automation into CI/CD pipelines.
• Hands-on penetration testing of production SaaS applications.
• Identifying and remediating common OWASP Top 10 vulnerabilities.
• Experience securing internal AI/LLM platforms and coding agents.

Responsibilities

• Build Product Security across Chainalysis' SaaS offerings, partnering with product and platform engineering teams on design, code, and remediation.
• Drive Security Code Reviews for new product launches - including custom penetration tests.
• Provide security review and guardrails for internal AI platforms and coding agents (LLM gateways, prompt/response controls).
• Create threat modeling, secure design reviews, and static/dynamic code analysis across the SDLC.
• Build security automation into our CI/CD pipelines.
• Participate in a shared on-call rotation for high-severity production security incidents.

Skills

Application security

Penetration testing

Code reviews

CI/CD security

Java

TypeScript/JavaScript

Python

Go

AI/ML security

Tools

Wiz

Burp

SonarCloud

Cloudflare

Terraform

GitHub

GitHub Actions

Artifactory

Job description

Chainalysis is seeking a Senior Product Security Engineer to be hands-on across one or more product areas, performing security reviews, penetration tests, and shipping fixes directly into product repos while driving SOC2 and risk framework work across R&D - Engineering.

You will work with AI-powered products at the intersection of blockchain data, AI and security, defending a SaaS platform used by governments, banks, and crypto exchanges.