Product Security

. Partner with product and engineering teams on architecture reviews, threat modeling, and secure design .

Posted 9/26/2026full-timeUnited StatesMid-LevelSenior💰 $175,000 - $200,000 per yearWebsite

Tools & technologies

CloudGoogle Cloud PlatformPythonSDLC

Key responsibilities & impact

Partner with product and engineering teams on architecture reviews, threat modeling, and secure design
Evaluate and roll out AI-assisted and agentic security workflows
Improve and maintain first- and third-party security tooling, including the in-house ASPM platform
Strengthen security controls throughout the SDLC and CI/CD pipeline
Implement code and dependency scanning, software supply chain protections, and safeguards for AI-assisted development
Serve as a GCP security subject matter expert for networking, data protection, secrets management, workload runtimes, and logging and monitoring
Implement least-privilege IAM, secure workload identities, and security guardrails through policy and infrastructure-as-code
Drive vulnerability management from triage through resolution, including risk assessment, remediation tracking, exceptions, and risk acceptance
Coordinate penetration testing engagements and remediation/retesting
Help shape and scale the product security program and communicate risk, progress, and outcomes to security leadership
Enable engineers through documentation, reusable guidance, targeted training, and mentorship

What you’ll need

5–7 years of experience in product security, cloud security engineering, software development or a related field
Practical experience applying AI and agentic workflows to accelerate security reviews, vulnerability triage, and remediation
Strong understanding of security risks associated with AI-assisted development
Strong knowledge of Google Cloud Platform (GCP) services and security best practices, including IAM, networking, data protection, and workload runtimes
Hands-on experience with penetration testing coordination, threat modeling, and risk assessment
Demonstrated proficiency in Python and cloud-native programming or scripting languages
Experience designing and maintaining security automation, policy enforcement, and continuous compliance controls using Infrastructure as Code
Familiarity with designing and enforcing least-privilege IAM and conducting access reviews
Ability to communicate security risks and recommendations clearly to engineering and leadership audiences

Comp & perks