Staff Product Security AI Engineer

Leverage specialized security expertise to identify and resolve complex security issues, recommending best practices and determining new approaches that have an impact on broader security operations, while aligning security strategies with business priorities Partner across teams and key stakeholders to drive security initiatives, leading and solutioning complex projects and programs to strengthen overall security posture. Apply advanced analytical skills and sound judgment to solve security challenges, considering diverse perspectives and innovative solutions. Stay current with industry trends and emerging technologies, understanding their security implications to the company's context. Directly contribute to improvements within the security domain and occasionally beyond, ensuring decisions lead to meaningful enhancements in security practices. Leverage relationships across teams, both within and outside of security, to influence initiatives and integrate feedback into security processes. Build and operate scanning and guardrail capabilities across source control, CI/CD, package ecosystems, and developer platforms. Tune SAST, SCA, and supply chain controls; investigate gaps and false positives and improve remediation guidance. Write and review code, APIs, detection rules, and automation that process findings and enforce security policy. Partner with developers, platform engineers, and security teams to troubleshoot integrations and deliver practical improvements. Evaluate new technical surfaces, including AI/LLM tools, and help define appropriate security controls. Use metrics and feedback to improve reliability, coverage, performance, adoption, and remediation outcomes. 5+ years relevant experience and a Bachelor's degree OR Any equivalent combination of education and experience. Hands-on familiarity with application security tools (SAST, DAST, SCA, WAF, Burp Suite). Strong programming experience in at least one language such as Ruby, Java, Python, JavaScript, or Swift. Hands-on experience with at least one major cloud vendor (AWS, Azure, GCP). Strong understanding of authentication and authorization protocols (OAuth 2.0, SAML). Familiarity with security considerations for AI/LLM development tools, AI-assisted coding, or model and tool supply chains. Experience with GCP, complemented by hands-on expertise with Kubernetes, Terraform, and other cloud-native technologies. Ability to work independently and collaborate with software, platform, and security teams, with clear written and verbal communication of technical findings and tradeoffs.