Senior Product Security Engineer: Guard AI, APIs & Cloud

RemoteLeads; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive salary

Medical, dental, vision coverage

401(k) with company match

Paid time off and Wellness Week

Equity for employees

Paid parental leave

Career growth opportunities

Job summary

RemoteLeads is seeking a Security Architect to lead security architecture reviews, threat modeling, and extensive testing for web, API, and AI-enabled services.

You will collaborate with engineering to remediate vulnerabilities, define secure coding standards, and integrate security into CI/CD pipelines across cloud environments. Strong communication and hands-on security expertise are required.

Qualifications

• 5+ years of experience in Product Security or Application Security.
• Experience securing web applications, APIs, microservices, and cloud-native applications.
• Experience with threat modeling and penetration testing.
• Strong knowledge of OWASP Top 10, authentication/authorization, OAuth/OIDC, and secure SDLC practices.
• Experience with SAST, DAST, SCA, and container security tools.
• Experience partnering directly with engineering teams.

Responsibilities

• Perform security architecture and design reviews for products and features.
• Conduct threat modeling for applications, APIs, and AI-enabled services.
• Perform manual penetration testing across web, API, thick-client, and mobile applications.
• Conduct secure code reviews and validate vulnerability remediation.
• Partner with engineering teams to prioritize and remediate vulnerabilities.
• Define secure coding standards, security guardrails, reusable patterns, and reference architectures.
• Triage findings from SAST, DAST, SCA, container scanning, and cloud security tools while tracking remediation SLAs and metrics.
• Assess AI and LLM applications for prompt injection, data leakage, insecure tool use, model abuse, and authorization weaknesses.
• Integrate security tooling into CI/CD and developer workflows and build automation to reduce manual work.
• Collaborate with Product, Engineering, Infrastructure, Cloud Security, Compliance, and Sales Engineering teams.

Skills

Threat modeling

Penetration testing

Secure coding practices

Vulnerability remediation

Education

Relevant security certification (CISSP/GWAPT)

Tools

Snyk

Burp Suite Pro

Semgrep

Wiz

GitHub Advanced Security

Kubernetes

GitHub Actions

Job description

RemoteLeads is seeking a Security Architect to lead security architecture reviews, threat modeling, and extensive testing for web, API, and AI-enabled services.

You will collaborate with engineering to remediate vulnerabilities, define secure coding standards, and integrate security into CI/CD pipelines across cloud environments. Strong communication and hands-on security expertise are required.