12 days ago
Remote, United StatesStaff+
Base Salary
$145k - $245k/yr
Responsibilities
- Partner with Engineering throughout the software development lifecycle to identify and mitigate security risks and implement secure deployment practices.
- Support threat modeling and help engineering teams implement appropriate security controls, secure architecture, and secure-by-design practices.
- Define and promote secure coding standards, security policies, best practices, and security training.
- Improve security testing programs and coordinate internal and external application and penetration testing initiatives.
- Validate vulnerability findings, prioritize remediation based on risk, and perform root cause analysis.
- Collaborate with Security Operations on application and service monitoring and detection capabilities.
- Triage and oversee remediation of security researcher disclosures through the bug bounty program.
- Evaluate and implement AI-assisted security scanning and automation, including security for AI-enabled applications and workflows.
- Develop product security documentation, asset and dependency inventories, risk metrics, secure deployment guardrails, and standardized “paved road” configurations.
- Mentor teams and help scale security champion programs and cross-functional product security capabilities.
Requirements
- 4–5 years of experience in product security, application security, software engineering, or a related field.
- Experience with security testing tools such as SAST, SCA, DAST, and container security scanners.
- Experience with CI/CD security controls and DevSecOps practices.
- Familiarity with one or more of Python, Go, Java, JavaScript/TypeScript, or Ruby.
- Ability to use AI-powered tools and automation for security engineering productivity, research, analysis, and remediation.
- Knowledge of emerging AI security risks and practices for securing AI-enabled applications, services, and development workflows.
- Deep expertise in threat modeling, secure architecture design, and vulnerability management.
- Experience influencing engineering organizations and driving security initiatives across multiple teams.
- Strongly preferred knowledge of OWASP AI Security and Privacy Guide, NIST AI Risk Management Framework, Cybersecurity AI, or OpenSSF AI/ML Security Framework.
- Strong analytical, problem-solving, communication, documentation, collaboration, and business-risk translation skills.
Benefits
- Remote work from anywhere within the continental United States.
- Medical, dental, and vision insurance.
- Short-term and long-term disability coverage.
- Life insurance, AD&D, and supplemental life insurance options.
- Healthcare, dependent-care, and limited-purpose flexible spending accounts.
- 401(k) Savings and Investment Plan with company matching.
- Flexible vacation policy, eight paid holidays annually, and sick leave.
- Paid parental leave.
- Employee Assistance Program and Care Counselors.
- Optional legal assistance, critical illness, accident, hospital indemnity, and pet insurance.
- Health Savings Account with employer contribution.
- Potential eligibility for a corporate bonus plan, role-specific commission, and equity participation.
Tech Stack
Categories
About SailPoint
SailPoint builds identity security software for large enterprises, covering identity governance, access management, automated provisioning, and compliance controls across cloud and on‑prem systems. It sells primarily via subscription licenses and enterprise services. Founded in 2005 and headquartered in Austin, Texas, SailPoint is owned by Thoma Bravo and serves complex, security‑sensitive organizations that need to manage workforce and machine identities at scale.