Senior Security Engineer, Product Security

Komodo Health

. Own the application security toolchain, including SAST, SCA, container and secret scanning, and DAST .

Posted 11/4/2026full-timeRemote • United StatesSenior💰 $174,000 - $245,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in application security, including hands-on coding in Python and TypeScript, and proficiency in security automation and threat modeling. Capable of implementing security policies, conducting penetration tests, and collaborating effectively with engineering teams to enhance product security.

Highest-signal resume keywords

Application Security EngineeringSecurity Automation in Python or TypeScriptHands-On GitHub Actions ExperiencePenetration Testing of Web ApplicationsCloud Security with AWS, GCP, or Azure

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PythonTypeScriptGoJavaSASTSCADASTThreat ModelingPenetration TestingOWASP Top 10

Soft Skills

Influencing Without AuthorityClear Documentation WritingRisk Communication

Tools & Technologies

GitHub ActionsAI Coding AssistantsInfrastructure as CodeVulnerability Management Controls

Industry Keywords

SOC 2 ReadinessPipeline AttacksDependency ConfusionSBOMsSecurity Metrics

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformJavaPythonSDLCTypeScriptGo

About the role

Key responsibilities & impact

Own the application security toolchain, including SAST, SCA, container and secret scanning, and DAST
Build security automation in Python or TypeScript and GitHub Actions
Implement policy-as-code checks, automated triage, and fix pull requests
Run threat models and design reviews for services and AI features
Review high-risk pull requests
Engage Security early across new products, major changes, AI features, and customer deployments
Partner with Engineering and Forward Deployed Engineering teams on designs and fixes
Represent Product Security in customer security reviews
Reduce engineering friction and support timely security remediation
Scope penetration tests, validate findings, and verify fixes
Evaluate AI security tooling and coach engineers on secure LLM, LLM Gateway, MCP, RAG, and agent patterns
Maintain SDLC and vulnerability management controls for SOC 2 readiness
Participate in the security on-call rotation
Establish scalable security testing, software supply-chain security, AI security guardrails, vulnerability-intake processes, and product-security metrics

Requirements

What you’ll need

6+ years in software or security engineering, including 3+ years in application or product security
Production coding experience in Python, TypeScript, Go, or Java
Hands-on GitHub Actions at scale, including reusable workflows, OIDC, secrets, and self-hosted runners
Knowledge of pipeline attacks and defenses, including poisoned pipeline execution, dependency confusion, compromised actions, pinning, SBOMs, artifact signing, and SLSA
Experience running SAST and SCA programs across many repositories and writing custom rules
Hands-on penetration testing of web applications and APIs
Experience with authenticated DAST
Fluency in OWASP Top 10 and API Security Top 10
Hands-on experience securing LLM applications or agents against prompt injection, data leakage, insecure output handling, and excessive agency
Daily use of AI coding assistants
Structured threat modeling and secure design review using STRIDE and/or MAESTRO
Hands-on cloud security experience with AWS, GCP, or Azure, including identity and access, network controls, containers, and infrastructure as code
Experience embedding with engineering teams and shipping fixes in their codebases
Ability to influence without authority, explain risk in business terms, write clear documentation, and own outcomes end to end

Benefits

Comp & perks

Performance-based bonuses may be available
Equity awards may be available
Comprehensive health, dental, and vision insurance
Flexible time off and holidays
401(k) with company match
Disability insurance and life insurance
Leaves of absence in accordance with applicable laws, regulations, and company policy
Flexible work model, with roles that may be performed from anywhere in the country
AI-integrated daily work environment