Staff AppSec Engineer – AI-Driven Product Security (Remote)

Filigran; United States; Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive compensation + equity

Remote-first flexibility

25 days PTO baseline

Volunteer days

Set up for success

Two annual in-person get-togethers

Job summary

Filigran is a global cybersecurity company building the XTM platform, open-source and enterprise solutions. We seek a Staff AppSec / Product Security Engineer to advocate security best practices, coach engineers, and drive secure coding, reviews, and threat modeling across product teams.

You will collaborate with R&D, Platform Engineering, compliance, and customer security stakeholders to maintain the security posture of our OpenCTI/OpenAEV ecosystem and related products.

Qualifications

• Strong interest in AI and its applications in cybersecurity.
• Ability to influence security strategy across SaaS/product teams.
• Experience with secure SDLC, CI/CD security tooling, and threat modeling.

Responsibilities

• Advise the CISO on product security strategy and implement it across product teams.
• Lead threat modeling and security reviews in feature refinements.
• Ensure security by default in authentication, RBAC, multi-tenancy, and GraphQL APIs.
• Drive secure SDLC and supply chain tooling (SAST, SCA, secret scanning, SBOMs).
• Mentor engineers and grow security champions across teams.

Skills

Python

TypeScript

Java

Security auditing

Open-source contributions

Education

Master degree in computer science or cybersecurity

Tools

OpenCTI

OpenAEV

Snyk

Job description

Filigran is a global cybersecurity company building the XTM platform, open-source and enterprise solutions. We seek a Staff AppSec / Product Security Engineer to advocate security best practices, coach engineers, and drive secure coding, reviews, and threat modeling across product teams.

You will collaborate with R&D, Platform Engineering, compliance, and customer security stakeholders to maintain the security posture of our OpenCTI/OpenAEV ecosystem and related products.