Staff AppSec – Product Security Engineer

Job not on LinkedIn

🔥 2 minutes ago

🇫🇷 France – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Filigran

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2022

🔒 Cybersecurity

☁️ SaaS

Cybersecurity • SaaS • Technology

Filigran is a cybersecurity company specializing in Threat Intelligence and eXtended Threat Management (XTM). They provide a comprehensive suite of software solutions which includes cyber threat intelligence, breach and attack simulation, and incident response capabilities. Filigran's offerings also include training programs and community support, empowering organizations to enhance their security postures against various cyber threats.

📋 Description

• Leverage AI tools and methodologies to boost productivity and impact • Contribute to building AI capabilities into internal workflows • Advise the CISO on product security strategy across the XTM platform and lead operational implementation in product teams • Translate security priorities into concrete actions and track technical security pains to resolution • Lead threat modeling and security reviews for authentication and RBAC, multi-tenancy, connectors, GraphQL API, and AI and agent features • Review critical pull requests, implement security fixes and conduct code reviews • Build shared secure-by-default components for authorization, secrets, safe outbound calls and input handling • Drive secure SDLC and supply-chain tooling in CI, including SAST, SCA, secret and container scanning, Renovate, Snyk, SBOMs and signed releases • Run product vulnerability management, including community and researcher intake, bug bounty, coordinated disclosure, CVEs, advisories, remediation SLAs and product-side security incidents • Mentor engineers, grow security champions through pairing and workshops, and document security architecture decisions • Collaborate with R&D, platform engineering, compliance, incident and customer success teams, as well as open-source contributors and security researchers • Report to the CISO with no direct reports

🎯 Requirements

• Master degreee in computer science and or cybersecurity • 8+ years of experience in software engineering and application or product security • At least 3 years as the security technical reference for a SaaS or enterprise product • Comfortable working in a remote, async-first environment • Strong interest in AI and its applications in cybersecurity • Comfortable leveraging AI-powered tools, including LLMs, automation and copilots • Production coding fluency in at least two of Python, Node.js, TypeScript, Java or Rust • In-depth knowledge of web and API security, including GraphQL, OIDC/SAML, RBAC, multi-tenant isolation, SSRF and injection • Knowledge of CI/CD security tooling, container security and Kubernetes security • Track record of leading cross-team security initiatives, coaching engineers and adopting standards • Autonomy, ownership and team spirit • Bonus: AI and LLM security, open source contributions or published CVEs, bug bounty experience, STIX 2.1 / MITRE ATT&CK, or hands-on OpenCTI/OpenAEV experience

🏖️ Benefits

• Competitive compensation + equity • Remote-first flexibility • 25 days PTO baseline • Volunteer days • Equipment choice and additional support for remote work and development needs • Two annual in-person get-togethers • Professional growth and learning opportunities • Equal opportunity employment

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume