Senior Product Security Engineer
Function Health1 month ago
Remote, United States or Austin, TX, USASenior
Responsibilities
- Design and deploy AI-powered security agents for automated code review, risk classification, escalation, and auto-remediation.
- Build and operate security tooling for SAST, SCA, secrets scanning, infrastructure-as-code validation, and software supply chain integrity.
- Conduct threat modeling, secure design reviews, manual security assessments, and proactive vulnerability testing across applications, APIs, and infrastructure.
- Partner with engineering teams to guide secure design decisions and embed security throughout development.
- Own secure-by-default development frameworks and controls.
- Connect application telemetry to detection and response systems and contribute to incident response and postmortems.
- Shape the long-term product security strategy and roadmap.
Requirements
- At least 5 years of experience in product security, application security, software engineering, or a combination of these areas.
- Experience building or operating AI-assisted security tooling, such as code-review agents, automated triage pipelines, or custom security automation.
- Strong Python experience.
- Deep expertise identifying and exploiting web, API, and application vulnerabilities beyond the OWASP Top 10.
- Experience embedding security into CI/CD pipelines.
- Ability to guide engineers through secure design decisions and produce documentation and design documents.
- Healthcare data or HIPAA experience, red teaming, and security architecture at scale are preferred.
Benefits
- Competitive salary and benefits package.
- Flexible working hours.
- Dynamic work environment encouraging creativity and innovation.
- Inclusive and diverse workplace with equal-opportunity employment practices.