Senior Product Security Engineer | Secure by Design

Cleo; Chicago (IL); Remote; USD 160,000 - 180,000; Full time

Benefits offered by this job

Remote work environment

Great Healthcare + Dental + Vision

401k match

Flexible PTO

Job summary

Cleo is seeking a Staff-level, hands-on application security engineer to own security from design through release for both on-premise and SaaS products. You will set standards, build guardrails, and work directly with engineers, reporting to the CISO.

This is a senior individual contributor role with program ownership and cross-functional influence. You will drive secure development lifecycle, vulnerability management, and product security posture across Cleo’s product lines, including cloud and

Qualifications

• 6+ years in application security or secure software engineering.
• Proficient in object-oriented languages, with Java preferred.
• Experience integrating SAST/SCA and secrets scanning in GitHub and CI/CD.
• Ability to perform threat modeling, design reviews, and remediation with developers.

Responsibilities

• Own SSDLC governance, threat modeling and design reviews for high-risk changes.
• Run risk-based triage for vulnerabilities and coordinate remediation.
• Lead penetration testing program and vulnerability disclosure.
• Define product security posture and roadmap with cross-functional partners.
• Address AI/LLM security concerns in product features.

Skills

Java

TypeScript

Python

Go

API security

Authentication

Tools

GitHub

CI/CD

Job description

Cleo is seeking a Staff-level, hands-on application security engineer to own security from design through release for both on-premise and SaaS products. You will set standards, build guardrails, and work directly with engineers, reporting to the CISO.

This is a senior individual contributor role with program ownership and cross-functional influence. You will drive secure development lifecycle, vulnerability management, and product security posture across Cleo’s product lines, including cloud and