Senior Product Security Engineer
Doppel · Remote · US Remote · Toronto, ON · San Francisco · New York ·
COMPENSATION
$175k – $200k
Listed on the employer's job board (Ashby)
- Senior level role
- Remote (US/Canada)
- GCP + Python
- AI security focus
- $175k-$200k USD
Doppel is an AI-native platform protecting brands from social engineering threats like phishing and impersonation. As a Senior Product Security Engineer, you will partner with product and engineering teams to conduct threat modeling, improve security tooling, and strengthen controls throughout the SDLC.
You will serve as a subject matter expert for GCP security, implement least-privilege IAM, and drive vulnerability management from triage to resolution. The position focuses on balancing security rigor with development velocity in an environment where AI-assisted coding is common.
What you'll do
- Partner with teams on architecture reviews, threat modeling, and secure design
- Evaluate and roll out AI-assisted security workflows for faster remediation
- Maintain first- and third-party security tooling to reduce noise and improve prioritization
- Strengthen SDLC and CI/CD controls including code scanning and supply chain protections
- Advise engineering teams on GCP security best practices for networking and data protection
- Implement least-privilege IAM and security guardrails via infrastructure-as-code
- Drive vulnerability management including validation, risk assessment, and SLA tracking
- Coordinate penetration testing engagements from vendor selection to retesting
- Enable engineers through documentation, guidance, training, and mentorship
What you'll need
- 5–7 years of experience in product security, cloud security, or software development
- Practical experience applying AI and agentic workflows to security reviews and triage
- Strong knowledge of GCP services, IAM, networking, and workload runtimes
- Hands-on experience with penetration testing coordination and threat modeling
- Proficiency in Python and cloud-native scripting for security automation
- Familiarity with designing least-privilege IAM and conducting access reviews
- Ability to communicate security risks clearly to engineering and leadership audiences
Stack
- Python
- Google Cloud Platform
- Infrastructure as Code
- ASPM platforms
- CI/CD pipelines
How you'll work
- Remote-first culture across the US and Canada
- Hybrid options available in New York, San Francisco, or Toronto
- Flexible PTO policy
- Quarterly offsites and travel opportunities
What you get
- Salary range of $175,000 to $200,000 USD
- Meaningful equity participation
- Comprehensive health benefits
- Parental leave provisions
- High growth environment with visible impact