Description
Greenlight is seeking a Senior Product Security Engineer to join its growing security team. The role involves ensuring the security of products across the software development lifecycle (SDLC) and supporting various security initiatives.
Responsibilities:
- Execute a comprehensive product security strategy aligned with company goals and risk appetite
- Work hands-on across code, infrastructure, and CI/CD to detect, prevent, and remediate risks
- Design, build, and operate security automation for the SDLC
- Perform manual design and implementation reviews from a security perspective
- Establish and enforce secure development standards and best practices
- Serve as a subject matter expert on AI and LLM ecosystem security
- Leverage automations and tools to continuously test and validate products
- Perform penetration testing and retesting
- Triage findings from security researchers and lead incident response
- Provide guidance and education to developers
- Partner with teams to prioritize and remediate security vulnerabilities
- Develop and maintain software supply chain protections
- Build automation for static and dynamic analysis
- Use data and telemetry to measure control effectiveness
- Foster a culture of security awareness and ownership
Requirements:
- 5+ years of experience finding security vulnerabilities and secure code development
- 2-4 years of experience with threat modeling
- Deep technical knowledge of web and mobile application security
- Experience with security tools and technologies
- Strong communication skills and ability to articulate complex security concepts
Nice to have:
- Experience with IoT hardware/firmware security assessment
- Contribution to the security community
- Experience in fintech or similar regulated companies