Lead - Product Security Engineer

Own end-to-end incident response for production SaaS security incidents, including investigation, root cause analysis, and customer communication within one business day.

Lead and mentor Product Security Engineers, reviewing pentest findings, vulnerability triage, and remediation efforts across web, API, mobile, cloud, and AI/LLM security surfaces.

Set and enforce security standards across cloud infrastructure (AWS WAF, IAM, TLS, container isolation) and partner with CTO on security strategy and risk decisions.

6+ years in security with ownership of incident response in production SaaS environments.

Strong AWS security expertise including WAF, IAM, TLS/ALB/CloudFront policies, container, and network isolation.

Experience managing or mentoring security engineers or demonstrated readiness to lead.

Excellent written communication skills for incident reports, customer updates, and executive communications.

Proven ability to lead root cause analysis and implement concrete preventive controls for critical security incidents such as access control failures, data exposures, or remote code execution vulnerabilities.

Comfortable acting as the authoritative and calm security voice during live incidents internally and externally with customers and leadership.

Hands-on knowledge of application security fundamentals with some exposure to securing AI/LLM-powered applications and building security processes from the ground up.