Senior Staff Product Security Engineer – AI

Jobtailor; Illinois; On-site; USD 140,000 - 220,000; Full time

Job summary

Jobtailor is seeking a Lead Product Security Engineer to oversee AI-assisted software development security, AI-enabled products, and agentic systems. You will drive vulnerability detection, remediation, and enterprise-wide improvements while mentoring engineers.

You will define security controls for AI models, agents, and pipelines, partnering with platform, cloud, security, and product teams to shape the security roadmap and risk-based enforcement across cloud environments.

Qualifications

• 8+ years of relevant experience and a Bachelor's degree OR equivalent combination of education and experience.
• Hands-on familiarity with SAST, DAST, SCA, WAF, and Burp Suite.
• Strong programming experience in Ruby, Java, Python, JavaScript, or Swift.
• Knowledge of Kubernetes, Terraform, and Git.
• Hands-on experience with AWS, Azure, or GCP.
• Strong understanding of OAuth 2.0 and SAML.
• Deep knowledge of application security vulnerabilities and secure software development practices.
• Hands-on experience securing AI systems.

Responsibilities

• Lead Product Security engineering across AI-assisted software development, AI-enabled products, and agentic systems; AI-driven vulnerability detection and remediation.
• Define methods and procedures for security assignments and initiatives.
• Lead complex, high-impact security projects and enterprise-wide improvements.
• Provide strategic direction and resolve complex security challenges.
• Mentor engineers and lead technical decisions across teams and business units.

Skills

Leadership

Security strategy

Mentoring

Communication

Education

Bachelor's degree or equivalent

Tools

SAST

DAST

SCA

WAF

Burp Suite

Kubernetes

Terraform

Git

OAuth 2.0

SAML

AWS

Azure

GCP

CI/CD

Security Scanners

Job description

• Lead Product Security engineering across AI-assisted software development, AI-enabled products and agentic systems, and AI-driven vulnerability detection and remediation
• Provide strategic direction and resolve complex security challenges
• Define methods and procedures for security assignments and initiatives
• Lead complex, high-impact security projects and enterprise-wide security improvements
• Define Product Security's AI security controls and assurance strategy and roadmap
• Design and operate controls for AI-generated code, coding agents, automated testing, and risk-based enforcement
• Lead security reviews of AI applications, models, agents, retrieval systems, data flows, and external tool integrations
• Create controls for agent identity, least privilege, tool access, execution isolation, human approval, and unsafe-behavior interruption
• Establish controls for AI models, agents, toolsets, datasets, and pipelines
• Define runtime monitoring, auditability, detection, containment, and incident-response requirements
• Build and scale AI-driven vulnerability discovery, validation, prioritization, and remediation capabilities
• Partner with AI platform, cloud engineering, security architecture, product, and development teams
• Establish criteria for evaluating and reassessing third-party models, AI services, APIs, and developer tools
• Define AI security risk, control effectiveness, remediation, and adoption metrics
• Serve as senior technical escalation point and lead architectural reviews after incidents or control failures
• Review AI architectures, threat models, and agent workflows
• Evaluate AI security scanners, adversarial tests, and runtime monitoring
• Mentor engineers and lead technical decisions across teams and business units

Requirements

• 8+ years relevant experience and a Bachelor's degree OR any equivalent combination of education and experience
• Hands-on familiarity with SAST, DAST, SCA, WAF, and Burp Suite
• Strong programming experience in Ruby, Java, Python, JavaScript, or Swift
• Knowledge of Kubernetes, Terraform, and Git
• Hands-on experience with AWS, Azure, or GCP
• Strong understanding of OAuth 2.0 and SAML
• Deep knowledge of application security vulnerabilities and secure software development practices
• Hands-on experience securing AI systems
• Strong software-engineering experience building and operating production security tooling, automation, platform services, or developer-facing capabilities
• Experience partnering with developers to implement security controls
• Strong written and verbal communication skills
• Experience designing and operating security controls across cloud environments, CI/CD systems, and application and infrastructure stacks
• Experience mentoring and developing engineers

Core Competencies

Demonstrates expertise in leading product security initiatives for AI systems, including the design and implementation of security controls, vulnerability detection, and remediation strategies. Proficient in collaborating with cross-functional teams to enhance security practices and mentor engineering talent.

Highest-signal resume keywords

• AI Security Controls
• Application Security Vulnerabilities
• Cloud Security (AWS, Azure, GCP)
• Programming (Ruby, Java, Python, JavaScript, Swift)
• Security Tooling and Automation

ATS Optimization Keywords

Hard Skills

• SAST
• DAST
• SCA
• WAF
• Burp Suite
• Kubernetes
• Terraform
• Git
• OAuth 2.0
• SAML

Soft Skills

• Strong Written Communication
• Strong Verbal Communication
• Mentoring

Industry Keywords

• AI-Assisted Software Development
• AI-Enabled Products
• Vulnerability Detection
• Secure Software Development Practices
• Incident Response

Tools & Technologies

• AWS
• Azure
• GCP
• CI/CD Systems
• Security Scanners