Senior Product Security Engineer

CanadaRemoteFull-timesenior

Product Security EngineerCybersecurity

1 views0 saves0 applied

Apply Now

Quick Summary

Overview

This position is listed on behalf of a partner company, who manages all applications and next steps.

Technical Tools

Product Security EngineerCybersecurity

This role leads product security across an AI-native technology environment, with a strong focus on building secure, scalable, and trustworthy products. You’ll work closely with architecture, engineering, product, and compliance teams to embed security throughout the software development lifecycle. The position combines AI/ML security, secure architecture, threat modeling, automation, and customer-facing security assurance. You’ll help address emerging AI-specific risks while establishing practical security standards and governance frameworks. The role also offers the opportunity to influence architectural decisions, strengthen security culture, and mentor engineering teams. It is well suited to a senior security professional who enjoys solving complex problems at the intersection of product development, cloud, and AI.

Architect and implement security controls for AI/ML systems, including model training, data pipelines, inference environments, and agentic workflows.
Identify and mitigate AI-specific threats such as prompt injection, data poisoning, model inversion, and model theft.
Establish controls for model provenance, integrity, auditability, and responsible AI security practices.
Align AI security initiatives with governance and compliance frameworks such as NIST AI RMF and the EU AI Act.
Embed security, privacy, and compliance requirements into application, cloud, software, and AI development lifecycles.
Define and maintain secure development standards, architectural guidance, and security best practices.
Lead threat modeling, secure design reviews, and risk assessments across the software development lifecycle.
Build security automation and governance capabilities that integrate naturally into engineering workflows.
Prepare customer-facing security assurance materials, including questionnaire responses, security whitepapers, and trust documentation.
Represent product security in customer, leadership, and cross-functional discussions, helping communicate security requirements and risk decisions.
Mentor engineering teams on secure coding, AI risk management, threat modeling, and secure design.
Promote a security-first culture through documentation, training, advocacy, and continuous improvement.

Requirements

~2 min read

5–7+ years of experience in product, application, or cloud security engineering.
Strong knowledge of secure SDLC practices, threat modeling, and secure architecture design.
Ability to read and review code to support security assessments, threat models, and architectural reviews.
Experience securing AI/ML pipelines, data workflows, and model-serving infrastructure, with practical knowledge of LLM and AI security risks such as prompt injection, model integrity, and provenance.
Strong understanding of cloud security principles and best practices across multi-cloud environments.
Familiarity with DevSecOps practices and CI/CD environments.
Knowledge of encryption fundamentals, including symmetric and asymmetric cryptography, TLS/mTLS, key management, and secrets handling.
Understanding of modern authentication and authorization patterns, including OAuth 2.0, OIDC, SAML, RBAC, and ABAC.
Demonstrated ability to lead cross-functional security initiatives and collaborate with engineering, product, and compliance teams.
Strong communication, stakeholder management, analytical thinking, and influencing skills.
Experience with Python, Java, and/or JavaScript for security automation and tooling is an advantage.
Experience with Kubernetes and container security, software supply chain security, artifact integrity, or bug bounty programs is a plus.
Familiarity with security and compliance frameworks such as SOC 2, ISO 27001, NIST 800-53, and NIST AI RMF is desirable.
Certifications such as CKS, CISSP, CSSLP, or AI/ML security credentials are considered a plus.