Sr Product Security Engineer

Overview

Build and operate product security tooling across the software development lifecycle. Automate security reviews and partner with engineering and security teams to improve coverage, accuracy, and developer experience.

What you'll do

• Build and maintain security tooling across repositories and CI/CD pipelines.
• Configure and tune Claude Code Security, Codex Security, GitHub Advanced Security, and Wiz CLI.
• Design automated security reviews with human-in-the-loop escalation.
• Integrate security tooling with GitHub PRs, CI/CD pipelines, IDE plugins, and dashboards.
• Automate triage, vulnerability detection, fix suggestions, and policy enforcement.
• Support product incident investigations, emergency fixes, and root cause analysis.
• Partner with testers, architects, the TPM, and engineering teams on security tooling.

What you'll need

• 4+ years in Application Security, Product Security, DevSecOps, or Security Engineering.
• Experience operating security tooling in CI/CD pipelines.
• Experience with SAST, DAST, SCA, and secret scanning tools in GitHub environments.
• Hands-on experience with AI-powered security tooling or LLM-based code analysis.
• Understanding of CI/CD architecture and security control integration.
• Experience with scripting, policy-as-code, webhooks, and workflow orchestration.
• Familiarity with container security scanning and cloud security fundamentals.

Nice to have

• Experience with GitHub Advanced Security at scale and custom CodeQL queries.
• Experience operating Wiz CLI or similar scanning in CI/CD.
• Product or security incident response experience.
• Familiarity with OPA/Rego, Kyverno, or similar frameworks.
• Cloud security experience across AWS, Azure, or Kubernetes.

Details

• Work mode: Remote.
• Location: Canada.