Senior Product Security Engineer — Secure AI-Driven Apps

Socket.dev; Miami (FL); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid work environment

Competitive salary

Medical, dental, vision

401(k) with company match

PTO

Equity

Paid parental leave

Wellness programs

Onsite amenities

Job summary

Iru seeks a highly technical Senior Product Security Engineer to embed security into the product development lifecycle. This hands-on role partners with Engineering, Cloud Security, Infrastructure, Compliance, and Product Management to ensure security is integrated throughout the SDLC while maintaining developer velocity.

The ideal candidate will perform application security testing, conduct threat modeling, and help build secure-by-design products, with a focus on AI-enabled services and secure

Qualifications

• 5+ years in Product Security or Application Security.
• Experience securing Web apps, APIs and microservices.
• Strong understanding of OWASP Top 10 and API Top 10.

Responsibilities

• Own security reviews and threat modeling for new products and features.
• Perform security testing including manual and automated approaches.
• Drive secure development practices across the SDLC and CI/CD pipelines.
• Lead vulnerability remediation and track security metrics.
• Assess AI-enabled products for security risks and define secure AI standards.
• Collaborate with Product, Engineering, Infrastructure and Compliance teams.

Skills

Product Security

Application Security

Threat Modeling

Penetration Testing

Security Audits

Cloud Security

CI/CD Security

SAST/DAST/SCA

Security Automation

Communication Skills

Tools

Snyk

Burp Suite Pro

Semgrep

Wiz

GitHub Advanced Security

Job description

Iru seeks a highly technical Senior Product Security Engineer to embed security into the product development lifecycle. This hands-on role partners with Engineering, Cloud Security, Infrastructure, Compliance, and Product Management to ensure security is integrated throughout the SDLC while maintaining developer velocity.

The ideal candidate will perform application security testing, conduct threat modeling, and help build secure-by-design products, with a focus on AI-enabled services and secure