Senior Product Security Engineer - Remote AI/Cloud

Royper Royco LLC; United States; Hybrid; USD 174,000 - 245,000; Full time

Benefits offered by this job

Health insurance

401(k) with match

Disability and life insurance

Paid time off

Job summary

Komodo Health is looking for an experienced security engineer to own the security of how we build, ship, and deploy software across GitHub, CI/CD pipelines, SAST/SCA/DAST, and AI-enabled features. You will collaborate with Engineering and FDE teams to embed security from the start and scale secure defaults across products.

In this role you will write code while reviewing others, run threat models for new services, and help shape a secure development lifecycle.

Qualifications

• 6+ years in software or security engineering.
• 3+ years in application or product security, shipping production code.
• Proficient in Python, TypeScript, Go or Java in production environments.
• Hands-on with GitHub Actions at scale and CI/CD.
• Experience with SAST/SCA/DAST tooling and vulnerability management.

Responsibilities

• Own the application security toolchain (SAST, SCA, container and secret scanning, DAST): configuration, custom rules, and a false-positive rate engineers can live with.
• Build security automation in Python or TypeScript and GitHub Actions: policy-as-code checks, auto-triage and fix pull requests.
• Run threat models and design reviews for new services and AI features, and review high-risk pull requests.
• Improve how Security engages across the product lifecycle: get involved early in new products, major changes, AI features and customer deployments, partner with Engineering and FDE teams on designs and fixes, and represent product security in customer security reviews.
• Reduce engineering friction and help ensure sufficient engineering capacity for timely security remediation.
• Scope penetration tests, validate their findings and verify the fixes.
• Evaluate AI security tooling and coach engineers on secure LLM, LLM Gateways, MCP, RAG and agent patterns.
• Keep SDLC and vulnerability management controls audit-ready for SOC 2, and join the security on-call rotation.

Skills

Software security

Python

TypeScript

Go

Java

GitHub Actions

Threat modeling

OWASP

CI/CD

Tools

SAST

SCA

DAST

Job description

Komodo Health is looking for an experienced security engineer to own the security of how we build, ship, and deploy software across GitHub, CI/CD pipelines, SAST/SCA/DAST, and AI-enabled features. You will collaborate with Engineering and FDE teams to embed security from the start and scale secure defaults across products.

In this role you will write code while reviewing others, run threat models for new services, and help shape a secure development lifecycle.