Senior Product Security Engineer

Hyperscience develops an AI platform that reads, understands, and processes documents at scale for enterprise organizations. The Senior Product Security Engineer will lead product security efforts for the company’s machine-learning-powered platform by embedding security into development, conducting design reviews and threat modeling, managing vulnerabilities, deploying automated defenses, and training engineering teams.

Responsibilities:

• Product Security Strategy: Implement and mature a software assurance model that embeds security into the earliest stages of our development lifecycle
• Security Design Reviews: Analyze new features and product releases, performing threat modeling and providing actionable guidance to engineering teams
• Vulnerability Management: Triage external security inquiries, perform manual code reviews to identify flaws, and advise developers on effective remediation techniques
• Automated Defenses: Design and deploy automated controls using open-source tools to detect, alert, and respond to common attacks against our cloud platform
• Security Knowledge Share: Facilitate internal training and workshops on security best practices, raising awareness and fostering a security-first culture across the organization

Requirements:

• Ability to read Python fluently and write production-ready code
• Also comfortable with shell scripting to build security automation and tooling
• Bring 5+ years of Product Security experience, partnering with developers in a SaaS environment to build and scale a software assurance program
• Show a practical ability to manually identify and exploit common security flaws in web applications and RESTful APIs
• Possess hands-on experience deploying and hardening containerized environments using Docker and Kubernetes
• Apply a structured approach to solving complex technical problems, coupled with strong communication skills and a deep sense of ownership
• Utilize modern AI tools and techniques to optimize security workflows, from code analysis to threat detection
• Have prior experience securing products that are heavily reliant on machine learning or artificial intelligence components
• Demonstrate experience deploying and managing open-source security tools to monitor cloud infrastructure (e.g., AWS, GCP, Azure)
• Show experience designing secure microservice architectures and distributed systems