Senior Security Engineer - ProdSec

Cogent Security is on a mission to stop breaches and prevent cybercrime by innovating at the frontier of generative AI systems. The Senior Security Engineer will own the security of the software built, partnering closely with engineering to embed security into the Software Development Lifecycle and ensuring the product is built on a secure foundation.

Responsibilities:

• Embed security into the software development lifecycle: threat modeling, secure design reviews, and secure-coding guidance that engineers actually adopt
• Own application security testing - code review, SAST/DAST, and triage - and drive issues to remediation rather than just filing them
• Harden our software supply chain: dependency verification, safe dependency management, and CI/CD pipeline security
• Build and automate security tooling and guardrails so security scales with engineering, not against it
• Serve as the internal security SME on product and workflow decisions, and as an early user of what we build
• Partner across all teams on architecture and design so security is a default, not an afterthought

Requirements:

• 5+ years of extensive security engineering experience within product / application security, upholding the highest Trust standards
• Strong hands-on engineer who ships - you produce and automate, you don't just manage process
• Strong software engineering skills; comfortable working in code across the stack (e.g. Python, Go, or similar)
• Depth in application/product security: secure SDLC, threat modeling, code scanning, and supply-chain / dependency security
• Fluency with the modern AI landscape and how it's influencing the security picture - staying up to date with the rapidly changing environment
• Able to flex up and down: strategic when it matters, in the weeds when it counts
• Comfortable being an early security hire at a startup - high ownership, ambiguity, and direct impact
• Experience securing AI/ML products or agentic systems
• Background contributing to developer-enablement or security-champions programs
• Prior experience as an early security hire or building an AppSec function from scratch