Senior Security Engineer

Greenlight is seeking a Senior Product Security Engineer to join its growing security team. The role involves ensuring the security of products across the software development lifecycle (SDLC) and supporting various security initiatives.

Responsibilities:

• Execute a comprehensive product security strategy aligned with company goals and risk appetite
• Work hands-on across code, infrastructure, and CI/CD to detect, prevent, and remediate risks
• Design, build, and operate security automation for the SDLC
• Perform manual design and implementation reviews from a security perspective
• Establish and enforce secure development standards and best practices
• Serve as a subject matter expert on AI and LLM ecosystem security
• Leverage automations and tools to continuously test and validate products
• Perform penetration testing and retesting
• Triage findings from security researchers and lead incident response
• Provide guidance and education to developers
• Partner with teams to prioritize and remediate security vulnerabilities
• Develop and maintain software supply chain protections
• Build automation for static and dynamic analysis
• Use data and telemetry to measure control effectiveness
• Foster a culture of security awareness and ownership

Requirements:

• 5+ years of experience finding security vulnerabilities and secure code development
• 2-4 years of experience with threat modeling
• Deep technical knowledge of web and mobile application security
• Experience with security tools and technologies
• Strong communication skills and ability to articulate complex security concepts

Nice to have:

• Experience with IoT hardware/firmware security assessment
• Contribution to the security community
• Experience in fintech or similar regulated companies