Staff Product Security Engineer | AI-Driven Security

Filigran; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Equity

Remote-first

25 days PTO

Volunteer days

Remote office setup support

Global in-person events

Job summary

Filigran is seeking a Staff AppSec / Product Security Engineer to strengthen security across the XTM platform. You will collaborate with R&D leaders and product teams to build secure, trustworthy software with emphasis on RBAC, multi-tenant isolation and secure APIs.

You’ll drive secure SDLC, threat modeling, and vulnerability management while mentoring engineers and coordinating with compliance and incident response teams. Remote-first with global teams and equity opportunities are available.

Qualifications

• Master's degree in CS or cybersecurity or related field.
• 8+ years of software engineering and security experience, including SaaS/enterprise products.
• Experience as security technical reference for cross-team initiatives.
• Strong knowledge of web/API security (GraphQL, OIDC/SAML, RBAC).

Responsibilities

• Lead threat modeling and security reviews during feature refinements.
• Advise on product security strategy across the XTM platform.
• Drive secure SDLC and supply chain tooling in CI (SAST, SCA, SBOMs).
• Mentor engineers and grow security champions across teams.
• Document security architecture decisions to remain consistent.
• Run product vulnerability management and coordinated disclosure.

Skills

AI in security

Threat modeling

Security reviews

CI/CD security tooling

RBAC/multi-tenant security

GraphQL security

Production code in Python/Node.js/Type

Security architecture

Education

Master's degree in Computer Science or Cybersecurity

Tools

Kubernetes

Docker

Snyk

SBOMs tooling

Job description

Filigran is seeking a Staff AppSec / Product Security Engineer to strengthen security across the XTM platform. You will collaborate with R&D leaders and product teams to build secure, trustworthy software with emphasis on RBAC, multi-tenant isolation and secure APIs.

You’ll drive secure SDLC, threat modeling, and vulnerability management while mentoring engineers and coordinating with compliance and incident response teams. Remote-first with global teams and equity opportunities are available.