Senior Product Security Engineer (Contract)

Triage findings from SAST, DAST, SCA, container scanning, and cloud security tools.

Work with engineering teams to prioritize remediation.

Track remediation SLAs and security metrics.

Assess AI-enabled products for security risks.

Review LLM integrations and AI workflows.

Test AI applications for prompt injection, data leakage, insecure tool use, model abuse, and authorization weaknesses.

Help define secure AI engineering standards.

Improve automation of security testing throughout CI/CD.

Integrate security tooling into developer workflows.

Build scripts and tooling that reduce manual security work.

Collaborate with Product, Engineering, Infrastructure, Cloud Security, and Compliance teams.

Support customer security questionnaires related to product security.

Assist Sales Engineering with security discussions when needed.

5+ years in Product Security or Application Security.

Strong understanding of modern application architectures.

Experience securing:

Web applications

APIs

Microservices

Cloud-native applications

Experience performing threat modeling.

Experience conducting penetration testing.

Strong understanding of:

OWASP Top 10

OWASP API Top 10

Authentication & Authorization

OAuth / OIDC

Secure SDLC

Experience with SAST, DAST, SCA, and container security.

Experience partnering directly with engineering teams.

Strong written and verbal communication skills.

Experience securing AI/LLM applications.

Experience with Kubernetes and containers.

Familiarity with cloud security (AWS, Azure, or GCP).

Experience with GitHub Actions or CI/CD security.

Experience using:

Snyk

Burp Suite Pro

Semgrep

Wiz

GitHub Advanced Security

Security certifications such as OSCP, GWAPT, GWEB, CSSLP, or CISSP are a plus