Source Job

US

  • Perform threat modeling and secure design reviews for new agent capabilities including tool use, memory systems, and multi-agent orchestration flows.
  • Research emerging attack surfaces relevant to AI agent platforms and translate findings into actionable mitigations.
  • Support enterprise customer security reviews and trust conversations related to agent security posture.

Application Security Threat Modeling Kubernetes API Security

20 jobs similar to Product Security Engineer

Jobs ranked by similarity.

Europe US 6w PTO

  • Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
  • Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
  • Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.

n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.

Brazil

  • Identify risks through security reviews, code audits, and penetration tests across applications, APIs, and integrations.
  • Secure our AI layer against prompt injection, excessive permissions, and unauthorized data access.
  • Define and update secure development practices, and support customer security calls.

Euler is an AI-native partner relationship management (PRM) platform that powers go-to-market partnerships, which drive 30-50% of company revenue. We grew 600% last year, are profitable, and have a culture of ownership and no ego.

US Unlimited PTO

  • Architect and scale agentic delivery platforms for application security assessments, threat modeling, and code reviews.
  • Serve as a security architect and AI strategy lead for client engagements and AI lab partnerships.
  • Drive secure-by-design AI systems aligned to OWASP, NIST, and MITRE frameworks while mentoring internal teams.

GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations minimize risk. With over 1,300 employees, it serves more than 6,200 customers and maintains a collaborative culture driven by core values.

North America 4w PTO

  • Collaborate with Product Engineering teams throughout the SDLC to identify vulnerabilities through threat modeling, design reviews, and secure code reviews.
  • Develop and implement end-to-end security solutions to mitigate risks across the product suite.
  • Drive improvements across Product Security tooling, automation, and the bug bounty program while experimenting with AI-based tools.

Superhuman is an AI productivity platform that integrates with over 1 million apps, offering writing, docs, inbox, and AI assistant products. Founded in 2009, it powers over 40 million people and 50,000 organizations worldwide.

$110,000–$130,000/yr
US Canada UK Germany Unlimited PTO 18w maternity 12w paternity

  • Maintain and improve customer security questionnaire responses, Trust Center content, and customer-facing security artifacts.
  • Audit and update AI agents used by Governance and Trust to ensure accuracy, quality, and alignment with current practices.
  • Establish repeatable processes for reviewing, versioning, and publishing assurance content.

Chainguard delivers hardened, secure, and production-ready builds of open source software so organizations can build faster, stay compliant, and eliminate risk. The company is venture-backed by leading investors and serves Fortune 500 enterprises, with a culture centered on customer obsession, intentional action, and mutual trust.

US

  • Own technical discovery, demos, and proof-of-value engagements for security leaders at Fortune 500s.
  • Answer architecture, data-handling, and AI governance questions live, and carry our security posture through vendor reviews.
  • Build reusable demo environments, POV templates, and technical answers for the team.

Clearly AI is a continuous threat modeling platform that gives security, privacy, and GRC teams the capacity to cover more with accurate, source-cited assessments. We're a Y Combinator-backed early-stage startup with Fortune 500 customers including Rivian, Ericsson, and PayPal, building alongside real practitioners.

US

  • Lead technical initiatives to strengthen engineering security across Aiwyn's SaaS platform, CI/CD pipelines, and software delivery systems.
  • Own vulnerability management, threat modeling, and product security, partnering with engineering teams to build secure-by-default practices.
  • Drive supply chain security, AI security, and security strategy to make security a shared responsibility across engineering.

Aiwyn builds the first complete platform for modern accounting firms, replacing legacy practice management systems with software firms can trust. Backed by top-tier investors, it works with the majority of the Top 500 accounting firms and fosters a culture of ownership, trust, and relentless innovation.

Americas

  • Own technical security controls for AI usage, including agent identity, tool access, guardrails, and logging.
  • Partner with AI Enablement, Engineering, DevOps, GRC, and Security to integrate security by design.
  • Build AI-powered security tooling and lead AI-specific incident response.

Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure, serving financial institutions across 40 countries. With 400+ distributed team members and $400M in funding, we are a diverse, remote-first team opening financial services to everyone.

Utah 4w PTO

  • Lead security reviews and threat models of AI features and agentic systems, setting standards for identity, data access, and safe tool handling.
  • Own the design of security team agents for validation, triage, and remediation, building them with clear evaluation criteria and human approval gates.
  • Partner with engineering and product leadership to embed security requirements into the SDLC, including design-time and release-time gates for AI features.

BambooHR builds a people intelligence platform that transforms HR and sets people free to do great work. They are a proven market leader driving innovation through sustainable growth, with a values-driven culture that champions professional and personal growth.

Europe

  • Take end-to-end ownership of security across a platform serving 50 million users, spanning application security, GRC, and AI security.
  • Collaborate closely with engineering leadership and development teams to identify vulnerabilities, strengthen controls, and drive remediation.
  • Protect AI-powered systems against evolving threats like prompt injection, jailbreaks, and third-party provider vulnerabilities.

They are a rapidly growing AI-powered technology platform serving over 50 million users worldwide. As a scale-up with more than 50 employees, they foster a high-autonomy, execution-focused culture with direct access to leadership.

North America

  • Partner with Fortune 500 customers to address security concerns and accelerate platform adoption.
  • Develop security reference architectures and perform threat modeling for ServiceNow products and AI services.
  • Lead security deep dives covering cloud-native architectures, identity, encryption, and AI security controls.

ServiceNow is an AI platform that helps enterprises automate workflows and reinvent business processes. The company serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent work together.

$0–$185,800/yr
Global 26w maternity 26w paternity

  • Design and build security solutions across application security, infrastructure, and AI agentic systems.
  • Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
  • Develop AI governance standards and security review agents to protect user trust.

Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.

US

  • Investigate and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information.
  • Translate technical findings into clear attack paths, business impact, and actionable remediation, and drive durable fixes through verified closure.
  • Build and operate security tools and integrations using code, APIs, automation, and AI agents, and design controls for agent access and execution.

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. They value diverse perspectives and are an equal opportunity employer.

$73,900–$83,300/yr
Canada 3w PTO

  • Collaborate across engineering, product, and customer teams to embed security requirements throughout the product lifecycle.
  • Manage security assessments, third-party risk reviews, and vulnerability disclosure processes, including CVE registration.
  • Support AI security governance and secure development practices, including monitoring applications and services beyond core engineering.

They are a growing technology organization that develops products with a strong focus on security and responsible AI adoption. The culture is collaborative and innovation-driven, with remote work across Canada, autonomy, and continuous improvement.

US Canada UK Unlimited PTO 18w maternity 12w paternity

  • Own the product security research agenda and turn emerging threats into strategy.
  • Partner with Product, Engineering, and Security leadership to shape roadmap decisions.
  • Represent Chainguard externally through talks and thought leadership to advance the industry.

Chainguard delivers hardened, secure, and production-ready builds of open source software, helping organizations build faster, stay compliant, and eliminate risk. They are a venture-backed, remote-first company serving Fortune 500 enterprises and global leaders, with a culture focused on customer obsession and intentional action.

$238,000–$280,000/yr
US

  • Define the long-term technical vision for AI/LLM offense and drive its integration into NodeZero's autonomous pentesting platform.
  • Lead research and productization of attacks on LLM applications, agentic systems, and AI infrastructure.
  • Partner with senior leadership to shape strategy, standards, and execution across engineering teams.

Horizon3 is a fast-growing, remote cybersecurity company building NodeZero, an autonomous pentesting platform. The team is a fusion of Special Operations cyber operators and startup engineers, with a culture of respect, collaboration, and results.

US Unlimited PTO

  • Run full kill chains against web, mobile, API, and thick/thin clients, proving exploitability and mapping blast radius.
  • Train the swarm by translating your tradecraft into reasoning and evaluation data for autonomous AI attackers.
  • Pressure-test the swarm, build tools, and tell the attack story to engineers and executives.

Armadin builds autonomous proactive security, deploying AI agents that discover and remediate threats before breaches. We're a scrappy, high-ownership team of elite researchers and engineers, led by Kevin Mandia, with startup-level autonomy.

$162,000–$270,000/yr
US

  • Own end-to-end product strategy and roadmap for your surface.
  • Conduct customer discovery and drive adoption through experiments.
  • Collaborate cross-functionally to deliver high-quality AI products.

Sophos is a global cybersecurity company providing advanced security solutions. It is a remote-first organization that values diversity, collaboration, and innovation.

US

  • Research AI security buyers, how they evaluate risk, and purchase decisions.
  • Build launches, content, and sales enablement for Delinea AI security capabilities.
  • Collaborate with product, marketing, and sales teams on messaging and positioning.

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, with a cloud-native Identity Security Platform. We are a global team backed by TPG, valuing diversity, innovation, and a culture of respect and fairness.