Staff Product Security Engineer-Remote EAST COAST ONLY
colossus technologies groupChandler (AZ)
Staff Product Security Engineer-Remote EAST COAST ONLY
Posted today
colossus technologies groupChandler (AZ)
SENIORITY
Lead
About the role
About the Company:
We are seeking an experienced Staff Product Security Engineer to help build security into products and engineering processes from the ground up. This is a highly technical role for someone who enjoys working directly with engineering teams, identifying security risks, and developing scalable solutions rather than simply finding vulnerabilities.
About the Role: Lead application and product security initiatives across the SDLC.
Responsibilities:
- Perform threat modeling, architecture reviews, and security assessments
- Identify and help remediate vulnerabilities across web applications, APIs, cloud environments, and services
- Improve SAST, DAST, SCA, and other automated security testing within CI/CD pipelines
- Partner directly with developers to design secure solutions and improve secure coding practices
- Conduct hands-on security testing and code reviews
- Help establish security standards, tooling, and automation
- Evaluate emerging security risks, including those related to AI/LLM technologies
Qualifications: 8+ years of Application/Product Security Engineering experience
Required Skills:
- Strong background in application security, threat modeling, penetration testing, and secure architecture
- Hands-on experience with SAST, DAST, SCA, CI/CD security, and vulnerability management
- Strong understanding of OWASP and modern application security threats
- Ability to review and understand production code; experience with languages such as Python, Java, TypeScript, or GoExperience working closely with software engineering teams on vulnerability remediation
- Cloud and modern infrastructure security experienceAI/LLM security experience is highly desirable
Preferred Skills:
This is an opportunity to take significant ownership of product security while working alongside experienced engineering and security teams in a modern, fast-moving technology environment. Remote EAST COAST ONLY
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.