Senior Product Security Engineer
AlphaSense2 months ago
Remote, CanadaSenior
Responsibilities
- Architect and enforce security controls for AI/ML systems, including model training, data pipelines, inference environments, and agentic workflows.
- Identify and mitigate AI-specific attack vectors, including prompt injection, data poisoning, model inversion, and model theft.
- Implement model provenance, integrity, and auditability controls for secure AI operations.
- Embed security, privacy, and compliance throughout application and AI development lifecycles.
- Define secure development standards, guidance, best practices, automation, and governance integrated into development workflows.
- Lead threat modeling, secure design reviews, and risk assessments across the software development lifecycle.
- Produce customer-facing security questionnaires, whitepapers, and trust collateral to support enterprise deals.
- Mentor engineering teams and promote a security-first culture through advocacy, documentation, and training.
Requirements
- 5–7+ years of experience in product, application, or cloud security engineering.
- Deep understanding of secure SDLC, threat modeling, and secure architecture design.
- Ability to read and review code for threat modeling and design reviews.
- Experience securing AI/ML pipelines, data workflows, model-serving infrastructure, and AI/LLM systems.
- Working knowledge of AI/LLM security topics including prompt injection, model integrity, and provenance.
- Expertise in cloud security concepts and practices across multi-cloud environments.
- Familiarity with DevSecOps and CI/CD environments.
- Knowledge of encryption, TLS/mTLS, key management, secrets handling, OAuth 2.0, OIDC, SAML, RBAC, and ABAC.
- Ability to lead cross-functional security initiatives and influence engineering, product, and compliance stakeholders.
- Preferred experience with Python, Java, or JavaScript for security automation and tooling.
- Preferred experience with Kubernetes runtime protection, software supply chain security, artifact integrity verification, and bug bounty programs.
- Preferred familiarity with SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF.
- Certifications such as CKS, CISSP, CSSLP, or AI/ML security credentials are desirable.
Benefits
- Opportunity to work on cutting-edge security challenges and shape product security strategy.
- Collaborative, security-minded engineering culture with career growth opportunities.
- Competitive compensation, performance-based bonus, equity, and a benefits program.
- Base compensation range of $159,000—$219,000 CAD.
Tech Stack
Categories
About AlphaSense
AlphaSense builds an AI-powered market intelligence and search platform used by investment, corporate strategy, and research teams to find insights across public and private content (equity research, filings, transcripts, expert calls, news, and internal documents). It sells enterprise subscriptions to its SaaS platform and content sets. Founded in 2011 and headquartered in New York, the company is privately held and acquired Tegus in 2024; its customers include a majority of the S&P 500.