Product Security Engineer
Collective27 days ago
Base Salary
$170k - $200k/yr
Responsibilities
- Build and operate an agentic application security program integrating SAST, DAST, SCA, LLM-based triage, and automated pull-request security reviews into CI/CD.
- Triage findings from scanners, penetration tests, and security researchers; route fixes, track remediation against SLAs, and verify that vulnerabilities are closed.
- Develop secure defaults, paved-path libraries, and framework-level fixes that eliminate vulnerability classes across the product codebase.
- Lead threat modeling and security reviews for new features and platform changes, and automate threat-model maintenance over time.
- Improve the security pipeline’s signal quality through new rules, better prompts, and fewer false positives.
- Monitor the vulnerability landscape relevant to fintech systems handling financial and tax data and translate relevant risks into program changes.
Requirements
- At least 4 years of security engineering experience with substantial application security depth and experience improving the security posture of a production platform.
- Hands-on experience with SAST, DAST, and SCA tooling and CI/CD integration, including tools such as Semgrep, CodeQL, Bandit, OWASP ZAP, and Burp Suite or equivalents.
- Experience using LLMs or AI agents to automate security work, including writing and evaluating prompts and workflows.
- Software engineering ability to read unfamiliar code and make well-scoped production changes, including experience with Python/Django on AWS.
- Experience driving vulnerability remediation through teams without direct management authority.
- Strong product empathy and judgment about which security findings matter and how to make feedback actionable.
Benefits
- Hybrid work model in San Francisco with in-office and remote flexibility
- Fresh lunch provided on in-office days
- $150 monthly commuter reimbursement for transit expenses
- $200 quarterly health and wellness reimbursement
- Flexible PTO and 14 company holidays
- 100% medical, dental, and vision coverage for employees and 75% coverage for dependents
- 16 weeks of fully paid parental leave
- 401k plan and equity package
- Quarterly virtual events and an annual in-person summit
About Collective
Collective is the first all-in-one financial platform designed to give self-employed entrepreneurs the technology and team they need so they can focus on their passion, not their paperwork. Collective handles LLC and S Corp formation, payroll, taxes, monthly bookkeeping, compliance and more all in one place, exclusively for solopreneurs.