Senior Security Engineer, Product Security

🔥 10 hours ago

🇺🇸 United States – Remote

💵 $174k - $245k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Komodo Health

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2014

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 $220M Series E on 2021-03

Healthcare • Consulting • Logistics

Komodo Health is a data-driven healthcare technology company that leverages comprehensive patient-encounter data, innovative algorithms, and clinical expertise to transform healthcare challenges into meaningful insights. With their Healthcare Map, Komodo Health provides a precise view of the U. S. healthcare system, offering software applications such as MapExplorer™, MapAI™, Komodo Drug Projections, and more to improve clinical, commercial, and patient engagement outcomes. Their solutions help quantify scientific engagement, mine insights from patient journeys, and enhance the precision of healthcare strategies, ultimately reducing the burden of disease and advancing technology use in healthcare.

📋 Description

• Own the application security toolchain, including SAST, SCA, container and secret scanning, and DAST • Build security automation in Python or TypeScript and GitHub Actions • Implement policy-as-code checks, automated triage, and fix pull requests • Run threat models and design reviews for services and AI features • Review high-risk pull requests • Engage Security early across new products, major changes, AI features, and customer deployments • Partner with Engineering and Forward Deployed Engineering teams on designs and fixes • Represent Product Security in customer security reviews • Reduce engineering friction and support timely security remediation • Scope penetration tests, validate findings, and verify fixes • Evaluate AI security tooling and coach engineers on secure LLM, LLM Gateway, MCP, RAG, and agent patterns • Maintain SDLC and vulnerability management controls for SOC 2 readiness • Participate in the security on-call rotation • Establish scalable security testing, software supply-chain security, AI security guardrails, vulnerability-intake processes, and product-security metrics

🎯 Requirements

• 6+ years in software or security engineering, including 3+ years in application or product security • Production coding experience in Python, TypeScript, Go, or Java • Hands-on GitHub Actions at scale, including reusable workflows, OIDC, secrets, and self-hosted runners • Knowledge of pipeline attacks and defenses, including poisoned pipeline execution, dependency confusion, compromised actions, pinning, SBOMs, artifact signing, and SLSA • Experience running SAST and SCA programs across many repositories and writing custom rules • Hands-on penetration testing of web applications and APIs • Experience with authenticated DAST • Fluency in OWASP Top 10 and API Security Top 10 • Hands-on experience securing LLM applications or agents against prompt injection, data leakage, insecure output handling, and excessive agency • Daily use of AI coding assistants • Structured threat modeling and secure design review using STRIDE and/or MAESTRO • Hands-on cloud security experience with AWS, GCP, or Azure, including identity and access, network controls, containers, and infrastructure as code • Experience embedding with engineering teams and shipping fixes in their codebases • Ability to influence without authority, explain risk in business terms, write clear documentation, and own outcomes end to end

🏖️ Benefits

• Performance-based bonuses may be available • Equity awards may be available • Comprehensive health, dental, and vision insurance • Flexible time off and holidays • 401(k) with company match • Disability insurance and life insurance • Leaves of absence in accordance with applicable laws, regulations, and company policy • Flexible work model, with roles that may be performed from anywhere in the country • AI-integrated daily work environment

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume