Product Security Engineer

About This Opportunity

We are representing a confidential market research and analytics organization that is seeking a Product Security Engineer to join their team. This is a fully remote position available anywhere in the United States, with flexible work hours (most team members work East Coast hours).

Our client operates at the intersection of alternative data, AI, and strategic intelligence, serving top-tier investment funds and Fortune 500 companies. They are looking for a security professional who can embed security into the product development lifecycle and work closely with engineering teams to identify and remediate vulnerabilities before they reach production.

Responsibilities

In this role, you will:

• Engage early in new product development through threat modeling and security design reviews to identify risks before production deployment
• Analyze application architecture, APIs, authentication and authorization systems, data flows, cloud services, and third-party integrations to assess potential attack vectors
• Identify and validate vulnerabilities, distinguish genuine risks from false positives, and help engineering teams prioritize remediation efforts
• Collaborate with developers to design practical remediation plans that balance security requirements with development velocity
• Manage and optimize security tooling across the development lifecycle, including SAST, DAST, dependency scanning, and secret scanning
• Build automation to help Product Security scale alongside growing engineering teams and expanding use of AI technologies
• Develop security standards, secure design patterns, coding guidelines, and documentation that engineers can readily adopt
• Lead incident response for product security issues, from initial investigation through root cause analysis and long-term fixes
• Serve as a trusted security advisor to Engineering and Product teams, providing sound judgment on complex security decisions
• Research emerging threats in cloud and AI-enabled products and help prepare defenses for evolving attack techniques

What We're Looking For

Required qualifications:

• Professional experience in product security, application security, software engineering, penetration testing, or a related field
• Ability to analyze complex systems, trace data flows, identify trust boundaries, and pinpoint security risks
• Hands-on experience with threat modeling, architecture reviews, and application security assessments
• Strong vulnerability validation skills, including determining exploitability and communicating impact to technical and business stakeholders
• Working knowledge of APIs, cloud services, containers, serverless technologies, and CI/CD pipelines
• Experience with security tools such as SAST, DAST, dependency scanners, secret scanners, or infrastructure-as-code scanning
• Coding ability in Python, JavaScript, or similar languages to automate security workflows
• Strong judgment to balance security needs with customer impact, engineering effort, and business priorities
• Excellent communication skills and ability to build credibility across technical and non-technical teams

Preferred qualifications:

• Experience securing AI-enabled products, agents, large language model applications, or MCP integrations
• Deep expertise in identity, authentication, authorization, or multi-tenant application security
• Familiarity with frameworks such as OWASP Top 10, OWASP MCP Top 10, OWASP ASVS, or NIST standards
• Comfort working in fast-paced environments with multiple products and shifting priorities

How We Work With You

Get A Job.ai partners with leading organizations to connect exceptional talent with career-defining opportunities. Here's our process:

• Apply directly through the Get A Job.ai platform
• Our recruiting team will review your application and conduct an initial screening
• Qualified candidates will be submitted to our client for consideration
• We will coordinate all communications and interviews throughout the process

Important: Please do not attempt to contact the client directly. All applications and inquiries must go through Get A Job.ai to be considered.

Pay

Pay via Get A Job.ai: $180,000 per year. Final compensation will be determined based on experience, skills, and internal benchmarks.

Please note that if remote work is performed in certain locations, income may be subject to New York State tax withholding.

Get A Job.ai is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and applicants regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or expression, or veteran status.