Staff Application & Product Security Engineer

Cleo Staff Application & Product Security Engineer YesterdaySaved Remote or Hybrid US 160K-180K Annually Senior level 160K-180K Annually Senior levelCloud • eCommerce • Information Technology • Professional Services • SoftwareOwns Cleo’s application and product security strategy across SaaS and customer-hosted products. Responsibilities include maturing the SSDLC, threat modeling, security scanning, vulnerability triage, penetration testing, coordinated disclosure, CVE management, product security controls, customer-facing advisories, and NIST CSF evidence. The role also leads security enablement, roadmap prioritization, AI security reviews, and hands-on exploit reproduction and patch validation while guiding engineers and security partners.Top Skills: APIsAWSBurp SuiteCi/CdContainer ScanningCyclonedxEksGitGithub Advanced SecurityGoIac ScanningJavaJenkinsKubernetesNist Ai RmfNist CsfOwasp AsvsOwasp SammOwasp Top 10 For Llm ApplicationsPolicy-As-CodePythonRbacSAMLSastScaSecrets ScanningSemgrepSlsaSnykSpdxSsoTerraformTypescriptVex