Senior Product Security Engineer
AlphaSense2 months ago
Remote, United KingdomSenior
Responsibilities
- Architect and enforce security controls for AI/ML systems, including model training, data pipelines, inference environments, and agentic workflows.
- Identify and mitigate AI-specific threats including prompt injection, data poisoning, model inversion, and model theft.
- Implement model provenance, integrity, and auditability controls for secure AI operations.
- Embed security, privacy, and compliance throughout the software and AI development lifecycle.
- Define secure development standards, guidance, and best practices.
- Lead threat modeling, secure design reviews, risk assessments, security automation, and governance integration.
- Produce customer-facing security questionnaires, whitepapers, and trust collateral.
- Represent product security in customer, cross-functional, and leadership discussions.
- Mentor teams on secure coding, AI risk management, and secure design while promoting a security-first culture.
Requirements
- 5–7+ years of experience in product, application, or cloud security engineering.
- Deep understanding of secure SDLC, threat modeling, and secure architecture design.
- Ability to read and review code for threat modeling and design reviews.
- Experience securing AI/ML pipelines, data workflows, and model-serving infrastructure, including AI/LLM security concepts.
- Experience with cloud security across multi-cloud environments.
- Familiarity with DevSecOps and CI/CD environments.
- Understanding of encryption, TLS/mTLS, key management, secrets handling, authentication, and authorization patterns.
- Knowledge of OAuth 2.0, OIDC, SAML, RBAC, and ABAC.
- Ability to drive cross-functional security initiatives with engineering, product, and compliance teams.
- Preferred: proficiency in Python, Java, and/or JavaScript for security automation and tooling.
- Preferred: container and Kubernetes runtime security, software supply chain security, artifact integrity verification, and bug bounty program experience.
- Preferred: familiarity with SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF.
- Preferred: CKS, CISSP, CSSLP, or AI/ML security credentials.
Benefits
- Competitive compensation, benefits, performance-based bonus, equity, and career growth opportunities.
- Opportunity to shape product security strategy and work on AI security challenges in a collaborative engineering culture.
Tech Stack
Categories
About AlphaSense
AlphaSense builds an AI-powered market intelligence and search platform used by investment, corporate strategy, and research teams to find insights across public and private content (equity research, filings, transcripts, expert calls, news, and internal documents). It sells enterprise subscriptions to its SaaS platform and content sets. Founded in 2011 and headquartered in New York, the company is privately held and acquired Tegus in 2024; its customers include a majority of the S&P 500.