Staff Product Security Engineer — Remote, AI‑Driven Secure SDLC

SailPoint; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

SailPoint is seeking a Staff Product Security Engineer to lead and scale our secure software initiatives. You will partner with Engineering to embed security across the SDLC, drive remediation, and advance threat modeling and secure-by-design practices. Remote work is available across the continental United States.

The role emphasizes AI-enabled security, vulnerability management, and collaboration with Security Operations and bug bounty programs to strengthen product defenses.

Qualifications

• 5–7 years of experience in product security, application security, software engineering, or a related field.
• Experience with security testing tools such as SAST, SCA, DAST, and container security scanners.
• Experience with CI/CD security controls and DevSecOps practices.
• Familiarity with programming languages such as Python, Go, Java, JavaScript/TypeScript, Ruby.
• Demonstrated ability to use AI-powered tools to enhance security engineering productivity, research, analysis, and remediation.
• Knowledge of AI security risks and best practices for AI-enabled applications.

Responsibilities

• Partner with Engineering teams to identify and mitigate security risks across the SDLC and implement secure deployment practices.
• Support threat modeling and help teams implement appropriate security controls.
• Define and promote secure coding standards, policies, and secure-by-design principles.
• Collaborate on AI integration and AI in the SSDLC.
• Improve security testing programs and coordinate testing initiatives.
• Triage, coordinate, and oversee remediation for bug bounty disclosures.

Skills

Threat modelling

Secure coding

AI tooling

Security leadership

Tools

SAST

DAST

SCA

Container scanning

Python

Job description

SailPoint is seeking a Staff Product Security Engineer to lead and scale our secure software initiatives. You will partner with Engineering to embed security across the SDLC, drive remediation, and advance threat modeling and secure-by-design practices. Remote work is available across the continental United States.

The role emphasizes AI-enabled security, vulnerability management, and collaboration with Security Operations and bug bounty programs to strengthen product defenses.