Senior Product Security Engineer

Description

The company is an AI platform for market intelligence and workflow automation, used by thousands of organizations in business and finance. Its content library holds over 500 million premium business documents, including equity research, earnings calls, expert interviews, filings, news, and internal proprietary material.

The team is hiring a senior product security engineer to lead secure design for the AI-native platform. You will work with architects, engineering, and product teams to build security into the development lifecycle from the start.

The role combines AI/ML security, secure architecture, threat modeling, and customer-facing assurance. You will set the standards, automation, and frameworks that let the company ship secure, intelligent products at scale.

Responsibilities

• Design and enforce security controls for AI/ML systems, covering model training, data pipelines, inference environments, and agentic workflows (30%).
• Find and reduce AI-specific attacks such as prompt injection, data poisoning, model inversion, and model theft.
• Build controls for model provenance, integrity, and auditability so AI operations stay secure and accountable.
• Work with governance and compliance teams to map AI security to NIST AI RMF and the EU AI Act.
• Build security into the software and AI development lifecycle with architects, engineering, and product teams across the application and cloud estate (30%).
• Make sure security, privacy, and compliance are part of the design from the beginning.
• Write and maintain secure development standards, guidance, and best practices.
• Lead threat modeling, secure design reviews, and risk assessments throughout the lifecycle (20%).
• Build and maintain security automation and governance that fits into developer workflows.
• Write customer-facing security material, including questionnaire answers, whitepapers, and trust documents, to help close enterprise deals (10%).
• Speak for product security in customer, cross-functional, and leadership meetings.
• Coach teams on secure coding, AI risk management, and secure design. Encourage a security-first culture through advocacy, documentation, and training (10%).

Requirements

• 5 to 7+ years in product, application, or cloud security engineering.
• Strong knowledge of secure SDLC, threat modeling, and secure architecture design.
• Ability to read and review code to inform threat models and design reviews.
• Hands-on experience securing AI/ML pipelines, data workflows, and model-serving infrastructure, with working knowledge of AI/LLM security such as prompt injection, model integrity, and provenance.
• Proven expertise in cloud security concepts and best practices across multiple clouds.
• Familiarity with DevSecOps and CI/CD pipelines.
• Familiarity with encryption basics: symmetric and asymmetric cryptography, TLS/mTLS, key management, and secrets handling.
• Understanding of authentication and authorization in modern applications, including OAuth 2.0, OIDC, SAML, RBAC, and ABAC.
• Proven ability to lead cross-functional security work with engineering, product, and compliance, building security into roadmaps, shaping architecture decisions, and aligning stakeholders.
• Proficiency in Python, Java, and/or JavaScript for security automation and tooling.
• Experience with container and orchestration security, including Kubernetes runtime protection.
• Experience with software supply chain security and artifact integrity verification.
• Experience running bug bounty programs: triaging findings, performing root-cause analysis, and turning results into systemic improvements.
• Familiarity with SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF.
• Certifications such as CKS, CISSP, CSSLP, or AI/ML security credentials.

Conditions

Base compensation is $182,000 to $228,000 USD. Final offers depend on factors including experience and expertise and may fall outside this range.

The company sets pay ranges by function and level, benchmarked against similar growth-stage companies and internal peers, and publishes ranges on every posting regardless of hiring location.

The company is an equal-opportunity employer and does not discriminate on any protected basis.

Be wary of recruiting scams. The company never asks candidates for payment, and official messages come from an the company's site email address. Verify any doubtful listing on the Careers page.

Benefits

• Work on hard security problems at a fast-growing company.
• Help shape the product security strategy.
• Join a collaborative engineering team that cares about security.
• Competitive pay, benefits, and career growth.
• You may also receive a performance bonus, equity, and a generous benefits package.