Senior Product Security Engineer - Remote

Close; Northern (KY); Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

PTO ~5 weeks

80% work option

Parental leave

Sabbatical

Healthcare + Dental + Vision

401k match

Job summary

Close is seeking a Product Security Engineer to build and lead security efforts across backend and frontend stacks. You will own vulnerability remediation, threat modeling, and tooling optimization while collaborating with Engineering, SRE, and auditors.

The role emphasizes AI-assisted review, safe reproduction of findings, and strong automation to reduce risk. You’ll work across Python, TypeScript, Flask, FastAPI, React, Docker, Kubernetes, AWS, and various security tools to secure critical

Qualifications

• An application security engineer who writes code and can fix production issues across backend and frontend.
• Skilled at finding vulnerabilities scanners may miss, using AI-assisted review pipelines and expert judgment.
• Offensive-minded and operationally responsible, turning findings into safe reproductions and prioritized fixes.
• An automation builder with experience in SAST/DAST, SCA, container scanning and cloud tooling integration.
• AI-native and accountable, using agents to accelerate investigation while verifying outputs.
• Able to separate severity from priority by considering risk, controls, and business impact.
• Comfortable collaborating across product, SRE, auditors, and researchers to close findings.
• Self-directed in a remote environment with the ability to turn ambiguity into actionable plans.

Responsibilities

• Build a recurring product security review program spanning backend, frontend, and APIs.
• Improve application security testing with static, dynamic, dependencies, and secrets scanning.
• Own vulnerability intake and remediation across HackerOne, scanners, and audits.
• Turn security alerts into useful engineering work with automation and prioritization.
• Make dependency remediation safer with automated upgrades and PR workflows.
• Rotate secrets and strengthen AWS security with infrastructure collaboration.
• Support audits and raise the security floor through documentation and training.
• Lead security incidents response and root-cause analysis.

Skills

Python

TypeScript

Threat modeling

Automation tooling

SAST

DAST

Software composition analysis

Container scanning

Secrets scanning

Cloud posture tooling

Incident response

Tools

Flask

FastAPI

React

Docker

Kubernetes

AWS

GraphQL

MongoDB

PostgreSQL

Redis

GitHub Actions

Job description

Close is seeking a Product Security Engineer to build and lead security efforts across backend and frontend stacks. You will own vulnerability remediation, threat modeling, and tooling optimization while collaborating with Engineering, SRE, and auditors.

The role emphasizes AI-assisted review, safe reproduction of findings, and strong automation to reduce risk. You’ll work across Python, TypeScript, Flask, FastAPI, React, Docker, Kubernetes, AWS, and various security tools to secure critical