Staff Product Security Engineer

🔥 0 minutes ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

💵 $134k - $184k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

AlphaSense

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2011

💼 Consulting

🏥 Healthcare

📣 Marketing

💰 Debt Financing on 2022-06

Consulting • Healthcare • Marketing

AlphaSense is a market intelligence and search platform that empowers companies to unlock critical insights across an extensive universe of public and private content, including company filings, broker research, expert calls, and market trends. Its AI-driven technology affords users the ability to conduct comprehensive due diligence with speed and accuracy, reducing uncertainty and blind spots in decision-making. Trusted by major corporations, financial institutions, and asset management firms globally, AlphaSense serves sectors such as financial services, health care, and technology by providing generative AI-powered solutions that integrate internal proprietary data with external premium content.

📋 Description

• Lead the design and implementation of secure, scalable, and trustworthy products spanning AI, data, and cloud-native systems • Work closely with engineering, data science, and infrastructure teams to embed security by design throughout the product lifecycle • Embed robust security practices throughout the software and AI development lifecycle • Lead secure design reviews, threat modeling, and risk assessments for AI-driven products, APIs, and backend services • Partner with engineering and product teams to ensure security, privacy, and compliance by design • Build and maintain security automation and governance frameworks integrated into development workflows • Architect and enforce security controls for AI/ML systems, including model training, data pipelines, and inference environments • Identify and mitigate AI-specific attack vectors including data poisoning, model inversion, prompt injection, and model theft • Align with ethical AI principles and frameworks such as NIST AI RMF and the EU AI Act • Implement model provenance, integrity, and auditability controls • Secure service meshes, container networking, and secrets management • Drive software supply chain security, artifact integrity, dependency management, and vulnerability reduction • Build internal frameworks for continuous assurance and real-time vulnerability management • Define and maintain reference security architectures for microservices, APIs, and cloud-deployed AI-powered systems • Mentor teams on secure coding, containerization best practices, and AI risk management • Promote a security-first culture through advocacy, documentation, and training • Represent product security in cross-functional initiatives and leadership discussions

🎯 Requirements

• 7+ years of experience in product or application security engineering • Deep understanding of secure SDLC, threat modeling, and secure architecture design • Proven expertise with AWS cloud security concepts and best practices • Strong experience with container security, orchestration, and runtime protection • Proficiency in Python, Java, and/or JavaScript for security automation, code review, and tooling • Experience securing AI/ML pipelines, data workflows, or model-serving infrastructure • Familiarity with DevSecOps and continuous integration/deployment environments • Familiarity with encryption fundamentals, including symmetric and asymmetric cryptography, TLS/mTLS, key management, and secrets handling best practices • Ability to drive cross-functional security initiatives and embed security requirements into roadmaps • Nice to have: Experience with GCP or Azure cloud platforms • Nice to have: Knowledge of AI and LLM security • Nice to have: Experience with software supply chain security and artifact integrity verification • Nice to have: Familiarity with compliance and governance frameworks including SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF • Nice to have: Understanding of OAuth 2.0, OIDC, SAML, RBAC, and ABAC • Nice to have: Certifications such as CKS, CISSP, CSSLP, or AI/ML-focused security credentials

🏖️ Benefits

• Performance-based bonus • Equity • Generous benefits program • Competitive compensation • Career growth opportunities • Reasonable accommodation for qualified employees with protected disabilities, as required by applicable laws • AlphaSense never asks candidates to pay for job applications, equipment, or training