Staff Security Engineer - AI-Driven SaaS Security Leader

Jellyfish; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

Jellyfish is hiring a Staff Security Engineer to own and scale our security program across the organization. You will define the security vision, build the strategy, and partner with engineering leadership to embed security into our DNA while remaining hands-on by building security features and writing high-quality code.

You will lead threat modeling, vulnerability management, and AI risk governance, shaping secure development across our SaaS platform and internal tooling.

Qualifications

• Proven track record owning and scaling application security programs in SaaS or startup environments.
• Deep software engineering expertise with emphasis on security.
• Experience securing AI-enabled systems and ML pipelines.
• Ability to balance rapid product innovation with security, privacy and compliance.

Responsibilities

• Define Security Strategy & Roadmap aligned with business objectives.
• Architect scalable security architectures across core infra, platform, and product.
• Own the SDLC; implement automated threat modeling and continuous risk assessments.
• Lead Secure AI development and governance for internal and customer-facing AI features.
• Lead AI threat modeling and risk assessments for ML ecosystems.
• Advance automation for vulnerability management and software bill of materials analysis.
• Mentor engineers and influence cross-functional leadership on security matters.
• Direct incident response, pentesting, and bug bounty strategy.

Skills

Security leadership

Secure SDLC

Threat modeling

Software engineering

Tools

Semgrep

LLVM

AWS

Terraform

Job description

Jellyfish is hiring a Staff Security Engineer to own and scale our security program across the organization. You will define the security vision, build the strategy, and partner with engineering leadership to embed security into our DNA while remaining hands-on by building security features and writing high-quality code.

You will lead threat modeling, vulnerability management, and AI risk governance, shaping secure development across our SaaS platform and internal tooling.