Senior Product Security Engineer (USA Only, 100% Remote)

Close · Remote · USA - Remote ·
Fully remoteFull-timeSenior5+ years
COMPENSATION
€•• – ••k
0 applicants so far

Listed on the employer's job board (Ashby)

  • Senior level role
  • Fully remote (USA)
  • Python + TypeScript
  • AWS + Kubernetes
  • 4-day week option

As the first dedicated Product Security Engineer, you will systematize security efforts across Close's engineering and infrastructure teams. You will identify vulnerabilities, drive remediation, and build automation to reduce risk in a Python and TypeScript codebase.

What you'll do

  • Build a recurring product security review program including threat modeling and code audits
  • Improve application security testing by combining static, dynamic, and dependency scanning
  • Own vulnerability intake, triage findings, and track remediation to closure
  • Automate alert ingestion, deduplication, and routing to reduce engineer workload
  • Streamline dependency remediation and secret rotation processes
  • Partner with Infrastructure to strengthen AWS security configurations and guardrails
  • Support external audits and provide technical context for compliance goals
  • Lead technical aspects of security incident response and root-cause analysis

What you'll need

  • Experience as an application security engineer who writes production-quality code
  • Strong proficiency in Python or TypeScript, with fluency across backend and frontend
  • Skill in finding vulnerabilities beyond conventional scanners using expert judgment
  • Ability to threat-model designs, review code, and test running systems safely
  • Experience tuning SAST, DAST, or container scanning tools to reduce noise
  • Comfort using AI-assisted review pipelines while verifying outputs for safety
  • Ability to assess exploitability and business impact rather than relying on scores
  • Self-directed work style suitable for a remote environment with ambiguous tasks

Stack

  • Python
  • TypeScript
  • React
  • Flask
  • FastAPI
  • GraphQL
  • Docker
  • Kubernetes
  • AWS
  • Vault
  • MongoDB
  • PostgreSQL
  • Redis
  • Elasticsearch

How you'll work

  • Fully remote position restricted to USA residents
  • Option to work a 4-day week at 80% pay
  • Approximately 5 weeks of paid time off to start
  • Annual company-wide winter holiday break

What you get

  • Competitive salary plus organization-wide goal-based bonus
  • Two medical plans with majority premium coverage for US residents
  • Dental, Vision, HSA, FSA, and long-term disability insurance
  • 401k plan with up to 6% immediate match for US residents
  • Paid parental leave for primary and secondary caregivers
  • One month paid sabbatical every five years

Hiring process

  • Submit application with thoughtful answers to role-specific questions
  • Receive status update regardless of fit
  • Proceed to interview steps outlined in first touchpoint if selected