Senior Product Security Engineer
Function Health3 months ago
Remote, United States or Austin, TX, USASenior
Responsibilities
- Design and deploy AI-powered security agents for automated code review, risk classification, escalation, and auto-remediation.
- Build and operate security tooling for SAST, SCA, secrets scanning, infrastructure-as-code validation, and supply chain integrity checks.
- Conduct threat modeling, secure design reviews, manual security assessments, and proactive vulnerability testing across applications, APIs, and infrastructure.
- Partner with engineering teams as an embedded security advisor and drive vulnerability remediation.
- Own secure-by-default development frameworks, controls, and product security strategy.
- Connect application telemetry to detection and response systems and contribute to incident response and postmortems.
Requirements
- Require 5+ years of experience in product security, application security, software engineering, or a combination.
- Experience building or operating AI-assisted security tooling such as code review agents, automated triage pipelines, or custom security automation.
- Strong Python experience; familiarity with FastAPI, LangChain, or agentic frameworks is a plus.
- Deep experience identifying and exploiting web, API, and application vulnerabilities beyond the OWASP Top 10.
- Experience embedding security into CI/CD pipelines and guiding engineers through secure design decisions.
- Ability to create documentation and design documents independently.
- Healthcare data or HIPAA experience, red teaming, and security architecture at scale are preferred.
Benefits
- Competitive salary and benefits package.
- Flexible working hours.
- Dynamic work environment supporting creativity and innovation.
- Function Health is committed to diversity and equal opportunity.
About Function Health
Function Health offers a consumer membership for proactive health tracking that combines 100+ lab tests, advanced MRI/CT imaging, and AI-driven insights with longitudinal data. The privately held company, founded in 2022 in the United States, reports over half a million members. It has expanded through acquisitions in imaging, mobile phlebotomy, and supplement tracking to build an integrated platform from testing to daily action.