Senior Product Security Engineer

Description

The company is an AI platform for market intelligence and workflow automation, used by thousands of large organizations in business and finance.

The platform draws on more than 500 million premium business documents, including equity research, earnings call transcripts, expert interviews, filings, news, and internal proprietary content.

The product line includes Generative Search, Generative Grid, and Deep Research.

The team is hiring a senior product security engineer to lead security design and build for AI-native products, working with architects, engineering, and product teams across the software development lifecycle.

The role combines AI/ML security, secure architecture, threat modeling, and customer-facing assurance, and sets the standards, automation, and frameworks that keep products secure at scale.

Responsibilities

• Spend about 30% of your time on AI security: design and enforce controls for model training, data pipelines, inference environments, and agentic workflows.
• Find and reduce AI-specific attacks such as prompt injection, data poisoning, model inversion, and model theft.
• Build controls for model provenance, integrity, and auditability so AI systems run securely and can be traced.
• Work with governance and compliance teams to map AI security to NIST AI RMF and the EU AI Act.
• Spend about 30% of your time on secure architecture and the development lifecycle: build security, privacy, and compliance into software and AI systems across application and cloud environments, alongside architects, engineers, and product managers.
• Write and maintain secure development standards, guidance, and best practices.
• Spend about 20% of your time on threat modeling: lead threat models, secure design reviews, and risk assessments throughout the development lifecycle.
• Build and maintain security automation and governance that fits into developer workflows.
• Spend about 10% of your time on customer-facing assurance: write security questionnaire responses, security whitepapers, and trust materials that help close enterprise deals.
• Represent product security in customer, cross-functional, and leadership discussions.
• Spend about 10% of your time on leadership: coach teams on secure coding, AI risk management, and secure design.
• Build a security-first culture through advocacy, documentation, and training.

Requirements

• Have 5 to 7+ years of experience in product, application, or cloud security engineering.
• Understand secure SDLC, threat modeling, and secure architecture design well.
• Read and review code well enough to inform threat models and design reviews.
• Have hands-on experience securing AI/ML pipelines, data workflows, and model-serving infrastructure, including working knowledge of LLM security such as prompt injection, model integrity, and provenance.
• Have proven expertise in cloud security concepts and best practices across multiple cloud providers.
• Be familiar with DevSecOps and CI/CD environments.
• Be familiar with encryption fundamentals: symmetric and asymmetric cryptography, TLS/mTLS, key management, and secrets handling.
• Understand authentication and authorization patterns in modern applications, including OAuth 2.0, OIDC, SAML, RBAC, and ABAC.
• Have shown you can lead cross-functional security work with engineering, product, and compliance, shaping roadmaps, influencing architecture decisions, and aligning stakeholders.
• Be proficient in Python, Java, and/or JavaScript for security automation and tooling.
• Have experience with container and orchestration security, including Kubernetes runtime protection.
• Have experience with software supply chain security and artifact integrity verification.
• Have run bug bounty programs: triaging findings, driving root-cause analysis, and turning results into lasting security improvements.
• Be familiar with compliance and governance frameworks such as SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF.
• Hold certifications such as CKS, CISSP, CSSLP, or AI/ML security credentials.

Conditions

Base pay ranges from $159,000 to $219,000 CAD.

The company sets pay ranges by function and level, benchmarked against similar-stage growth companies and internal peers, and publishes them on all postings in every hiring location.

Final offers depend on factors including your experience and expertise and may fall outside the published range.

The company is an equal-opportunity employer and does not discriminate on any protected or non-merit basis.

The company warns that fraudulent postings and fake recruiters exist: it never asks for payment for applications, equipment, or training, and official email comes only from an @ the company's site address.

Benefits

• Work on hard security problems at a fast-growing company.
• Help shape the product security strategy.
• Join a collaborative engineering team that cares about security.
• Receive competitive compensation, benefits, and career growth opportunities.
• You may also be offered a performance-based bonus, equity, and a generous benefits package.