Senior Product Security Engineer - Scalable Defender

Leadout Capital; San Francisco (CA); On-site; USD 170,000 - 250,000; Full time

Job summary

Frontier AI is seeking a senior security engineer to partner with product teams, assessing and preventing vulnerabilities across a large software portfolio. You will validate findings, build static analysis rules, and influence security decisions with leadership.

You will work with Java, Python, JavaScript/TypeScript, Go, or Ruby ecosystems, applying threat modeling and cloud security principles. The role emphasizes collaboration, ambiguity tolerance, and delivering measurable security outcomes.

Qualifications

• 5+ years in security engineering, application security, or a directly adjacent role.
• Hands-on vulnerability-discovery experience of at least 2 years.
• Familiarity with at least one major language ecosystem (Java, Python, JavaScript/TypeScript, Go, Ruby).

Responsibilities

• Use agentic security systems, custom static analysis, manual review, and threat modeling to surface real risk.
• Spend real time on validation, reducing manual validation cost.
• Create static analysis rules to block recurring vulnerability classes at PR time.
• Contribute to the intake pipeline that elevates high-value findings to merge-blocking rules.
• Provide security consulting on hard architectural questions.
• Extend and apply scoping methodology across products.
• Aim for measurable impact: detections shipped, vulnerabilities closed, systemic patterns eliminated.

Skills

Security engineering

Vulnerability discovery

Java

Python

JavaScript/TypeScript

Go

Ruby

Education

Related technical degree

Tools

Semgrep

CodeQL

Job description

Frontier AI is seeking a senior security engineer to partner with product teams, assessing and preventing vulnerabilities across a large software portfolio. You will validate findings, build static analysis rules, and influence security decisions with leadership.

You will work with Java, Python, JavaScript/TypeScript, Go, or Ruby ecosystems, applying threat modeling and cloud security principles. The role emphasizes collaboration, ambiguity tolerance, and delivering measurable security outcomes.