Senior Security Engineer – Product & Infrastructure

Squads

. Own product and infrastructure security across Squads .

Posted 10/6/2026full-timeRemoteSenior💰 $175,000 - $220,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in product security, application security, and security engineering, with a strong foundation in software engineering. Proficient in threat modeling, vulnerability management, and secure code reviews, particularly in complex financial or distributed systems.

Highest-signal resume keywords

Product SecurityThreat ModelingVulnerability ManagementSecure Code ReviewIAM Expertise

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

TypeScriptRustGoPythonCI/CD ScanningSecure Code ReviewThreat ModelingVulnerability ManagementContainer SecurityNetwork Controls

Soft Skills

Strong Written CommunicationAbility to Work Independently

Tools & Technologies

AWSSASTSecrets ManagementBug Bounty ProgramsAudit Tools

Industry Keywords

Application SecuritySecurity EngineeringCryptographyKey ManagementSOC 2 Compliance

Tech Stack

Tools & technologies

AWSCloudDistributed SystemsPythonRustTypeScriptGo

About the role

Key responsibilities & impact

Own product and infrastructure security across Squads
Serve as security reviewer in product and engineering calls
Lead threat modeling and security design reviews for products, features, and infrastructure changes
Perform secure code reviews across backend services, APIs, frontends, and Solana programs
Focus reviews on authentication, authorization, and access control
Own the lifecycle of findings from audits, pentests, code scanning, and bug bounty
Triage, prioritize, track remediation, and verify fixes
Set severity and SLA standards and enforce them
Run bug bounty intake and validate external reports against source
Coordinate with audit partners and scope internal assessments
Tune and extend SAST, dependency, secrets, and container scanning in CI/CD
Review IAM, network controls, encryption, and secrets management across cloud environments
Assess access of internal AI tools, MCP integrations, and agents in production
Define product security standards, review checklists, and developer guidance

Requirements

What you’ll need

8+ years in product security, application security, or security engineering, built on a software engineering foundation
Ownership of threat modeling and architecture review for complex financial or distributed systems
Track record of finding critical, non-obvious vulnerabilities in large production codebases
Experience with TypeScript, Rust, Go, or Python
Experience with LLM and agent-based review workflows
Experience building and running a vulnerability management program or bug bounty end to end
Experience with CI/CD scanning
Deep expertise in IAM, secrets management, network controls, and container security on AWS or a comparable provider
Strong written communication and ability to work independently
Experience reviewing Solana programs (Rust/Anchor), working at an audit firm, cryptography and key management (HSMs, MPC, PKI), offensive testing across web and mobile, red teaming AI systems, or supporting SOC 2 from the product side is a plus

Benefits

Comp & perks

Equity
Remote work in North America or Europe