Application security for products and/or features supported by your assigned development teams.
Performing security testing and triaging findings identified by SAST, SCA, IAST, DAST, and penetration tests.
Leverage AI and MCP to create intelligent, context-aware security guidance and automation.
Providing remediation consulting services to assigned development teams.
Assist with vulnerability management reporting and tracking.
Coordinating third-party penetration testing engagements, analyzing reports, and opening tickets for remediation.
Contribute to the configuration and management of security tools.

5+ years of application/product security experience.
2+ years of experience securing Java, Python, and/or JavaScript web applications.
Knowledge of enterprise-level software architecture components and cloud infrastructure.
Experience building trusted advisor relationships with engineers, product owners, and engineering management (up to director level).
Experience with AI security tooling, context-aware automation for SSDLC.
Understanding of AI privacy and governance in developer workflows.
Experience using and building agentic AI systems that work collaboratively.
Experience advocating for the remediation of application security risk and, simultaneously, the associated development/engineering team(s).
Experience in identifying vulnerabilities in source code, providing detailed steps to reproduce exploitation, and providing recommendations to engineering teams on how to remediate issues.
A bachelor’s degree or equivalent related working experience is required.
This position is not eligible for visa sponsorship.
Because this role supports the US government, it is required that this candidate be a US citizen who resides on US soil.

Senior Product Security Engineer

Key skills