Senior Security Engineer, AI-Driven Product Security

Cogent-Security; San Francisco, New York (CA, NY); On-site; USD 100,000 - 300,000; Full time

Job summary

Cogent Security seeks a Senior Security Engineer, Product Security to own the security of the software you build. You will partner with engineering to embed security into the SDLC, secure dependencies, and ensure a secure product foundation. You’ll act as an internal SME and influence what we ship.

You will drive code reviews, SAST/DAST, and supplier security, while collaborating across teams to make security a default, not an afterthought.

Qualifications

• 5+ years of extensive security engineering experience within product / application security.
• Strong hands-on engineer who ships and automates.
• Strong software engineering skills across the stack (Python, Go, Typescript).
• Deep knowledge of secure SDLC, threat modeling, code scanning, and supply-chain security.
• Fluency with the modern AI landscape and its security implications.
• Able to work strategically and in the weeds.
• Comfortable as an early security hire in a startup with high ownership.

Responsibilities

• Embed security into the software development lifecycle (threat modeling, design reviews, secure coding guidance).
• Own application security testing (code review, SAST/DAST) and drive remediation.
• Harden software supply chain (dependency verification, safe dependency management, CI/CD security).
• Build and automate security tooling and guardrails to scale with engineering.

Skills

Security engineering

Hands-on engineering

Software engineering

AI security fluency

Strategic alignment

Job description

Cogent Security seeks a Senior Security Engineer, Product Security to own the security of the software you build. You will partner with engineering to embed security into the SDLC, secure dependencies, and ensure a secure product foundation. You’ll act as an internal SME and influence what we ship.

You will drive code reviews, SAST/DAST, and supplier security, while collaborating across teams to make security a default, not an afterthought.