Staff Product Security Engineer

🕒 il y a 1 jour

🌐 États-Unis, Canada – Distant

🇺🇸 États-Unis – Télétravail 🇨🇦 Canada – Télétravail

💵 $134 000 - $184 000 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

AlphaSense

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2011

💼 Conseil

🏥 Santé

📣 Marketing

💰 Debt Financing en 2022-06

Consulting • Healthcare • Marketing

AlphaSense est une plateforme de veille stratégique et de recherche qui permet aux entreprises de découvrir des informations cruciales à travers un vaste univers de contenu public et privé, incluant les dépôts d'entreprises, les recherches de courtiers, les appels d'experts et les tendances du marché. Sa technologie basée sur l'intelligence artificielle offre aux utilisateurs la possibilité de réaliser une due diligence complète avec rapidité et précision, réduisant l'incertitude et les lacunes dans la prise de décision. Reconnue par des grandes entreprises, des institutions financières et des sociétés de gestion d'actifs dans le monde entier, AlphaSense dessert des secteurs tels que les services financiers, la santé et la technologie en fournissant des solutions alimentées par l'IA générative qui intègrent des données propriétaires internes avec du contenu premium externe.

Description

• Lead the design and implementation of secure, scalable, and trustworthy products spanning AI, data, and cloud-native systems • Work closely with engineering, data science, and infrastructure teams to embed security by design throughout the product lifecycle • Embed robust security practices throughout the software and AI development lifecycle • Lead secure design reviews, threat modeling, and risk assessments for AI-driven products, APIs, and backend services • Partner with engineering and product teams to ensure security, privacy, and compliance by design • Build and maintain security automation and governance frameworks integrated into development workflows • Architect and enforce security controls for AI/ML systems, including model training, data pipelines, and inference environments • Identify and mitigate AI-specific attack vectors including data poisoning, model inversion, prompt injection, and model theft • Align with ethical AI principles and frameworks such as NIST AI RMF and the EU AI Act • Implement model provenance, integrity, and auditability controls • Secure service meshes, container networking, and secrets management • Drive software supply chain security, artifact integrity, dependency management, and vulnerability reduction • Build internal frameworks for continuous assurance and real-time vulnerability management • Define and maintain reference security architectures for microservices, APIs, and cloud-deployed AI-powered systems • Mentor teams on secure coding, containerization best practices, and AI risk management • Promote a security-first culture through advocacy, documentation, and training • Represent product security in cross-functional initiatives and leadership discussions

🎯 Exigences

• 7+ years of experience in product or application security engineering • Deep understanding of secure SDLC, threat modeling, and secure architecture design • Proven expertise with AWS cloud security concepts and best practices • Strong experience with container security, orchestration, and runtime protection • Proficiency in Python, Java, and/or JavaScript for security automation, code review, and tooling • Experience securing AI/ML pipelines, data workflows, or model-serving infrastructure • Familiarity with DevSecOps and continuous integration/deployment environments • Familiarity with encryption fundamentals, including symmetric and asymmetric cryptography, TLS/mTLS, key management, and secrets handling best practices • Ability to drive cross-functional security initiatives and embed security requirements into roadmaps • Nice to have: Experience with GCP or Azure cloud platforms • Nice to have: Knowledge of AI and LLM security • Nice to have: Experience with software supply chain security and artifact integrity verification • Nice to have: Familiarity with compliance and governance frameworks including SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF • Nice to have: Understanding of OAuth 2.0, OIDC, SAML, RBAC, and ABAC • Nice to have: Certifications such as CKS, CISSP, CSSLP, or AI/ML-focused security credentials

🏖️ Avantages

• Performance-based bonus • Equity • Generous benefits program • Competitive compensation • Career growth opportunities • Reasonable accommodation for qualified employees with protected disabilities, as required by applicable laws • AlphaSense never asks candidates to pay for job applications, equipment, or training