{"id":124391,"url":"https://alion.io/job/greenlight-financial-technology-staff-product-security-engineer-2","title":"Staff Product Security Engineer","company":{"id":717037,"name":"Greenlight","domain":"greenlight.com","url":"https://alion.io/company/greenlight-6","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Atlanta, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":125000,"max_usd":250000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":451},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Cursor","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"DLP","optional":false},{"name":"DynamoDB","optional":false},{"name":"GCP","optional":false},{"name":"Helm","optional":false},{"name":"Java","optional":false},{"name":"Kali Linux","optional":false},{"name":"Kotlin","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Metasploit","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"MySQL","optional":false},{"name":"Node JS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Postman","optional":false},{"name":"React.js","optional":false},{"name":"Redis","optional":false},{"name":"Redux","optional":false},{"name":"STRIDE","optional":false},{"name":"SwiftUI","optional":false},{"name":"Threat Modeling","optional":false},{"name":"JavaScript","optional":true},{"name":"PCI DSS","optional":true},{"name":"Swift","optional":true}],"status":"live","first_seen_at":"2026-06-25T20:05:35Z","employer_posted_date":"2026-06-25","last_verified_at":"2026-11-02T05:58:46Z","board_verified":true,"closed_at":null,"days_open":129,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":129},"description":"We are seeking an experienced and motivated Staff Product Security Engineer to join our growing Security team. This individual will be responsible for the end-to-end security of our consumer products, digital platform and an emerging hardware device line. The Staff Product Security Engineer will drive security review, threat modeling programs, lead penetration testing, manage PSIRT operations, champion secure AI adoption and establish security guardrails for AI powered products and AI assisted development workflows within a highly regulated financial services environment.\nThis role reports to the Senior Manager of Product Security.\nYour day-to-day:\nLead security architecture/design review and threat modeling sessions with product and engineering teams using STRIDE, PASTA and attack tree methodologies. \nTranslate threats into actionable, risk-rated engineering remediations prioritized by severity.\nConduct hands-on penetration testing and security assessments across our full product stack producing actionable reports for engineering and leadership.\nRed-Team our AI powered products and development tools to test for prompt injection, data exfiltration, MCP server exploitation, and tool misuse. Probe AI guardrails to ensure they hold. Experience with product security tools such as Burp Suite, Metasploit, Kali Linux, Postman, etc.\nDrive PSIRT Operations by triaging incoming vulnerability reports, leading technical investigations, coordinating remediation with engineering, scoring severity (CVSS), managing coordinated disclosure with external researchers and on-call incidents. This includes managing zero day findings, driving remediation, collaborating with engineering to patch or mitigate with compensating controls.\nShape the posture of our AI assisted development environment defining and enforcing enterprise policies for claude and cursor. \nPartner across the organization, sitting in design review with architects, advising product managers and engineering teams on security and compliance implications of new features, briefing executives on emerging AI threats, mentoring junior security engineers and collaborating with the AI team on securing ML pipelines.\nChampion Security Culture by running developer training on secure coding with AI assistants, evangelizing security by design for products and ensuring every engineer understands that product security is an enabler and not a gate.\nWhat you’ll bring to the team:\n10+ years of product security experience spanning application security, cloud security, and secure SDLC. you will have full SDLC experience from design through development, deployment and incident response.\nExpert level Threat Modeling using STRIDE, PASTA or equivalent across web, mobile, cloud, embedded and AI systems.\nHands-on penetration testing skills across applications, API, cloud infrastructure, and hardware/firmware. You think like an attacker and you can provide it through published research, CVE discoveries, bug bounty results or red-team engagements.\nPSIRT operational experience from vulnerability intake and triage. You are fluent in CVE, CVSS, FIRST PSIRT frameworks.\nDeep hands down AI security expertise and expert level understanding of OWASP Top 10 for LLM, API, Web, Mobile and have practical experience with MITRE.\nStrong hands-on experience in security tools SAST, DAST, SCA, and securing AI development tools specifically Claude and Cursor. \nYou understand MCP security risks and know how to architect enterprise guardrails that enable safe AI-assisted development. You have defined policies for AI generated code, secrets scanning, and DLP for outbound AI traffic. \nStrong programming ability and capability to review code, build security tools, automate workflows and be credible with the engineering teams you partner with.\nDeep technical knowledge of CI/CD pipeline and relevant tools for web and mobile applications.\nStrong knowledge of programing language & frameworks (i.e. Node.js, Java/Kotlin, React, Redux, Swift, SwiftUI), cloud technologies and infrastructure (i.e. AWS, GCP, Kubernetes, Ambassador, Helm), and databases (i.e. MySQL, DynamoDB, Redis)\nAbility to influence without authority, mentor without managing , and communicate complex risks in a language that resonates with engineers, product managers, legal and compliance and executives alike. \nPreferred experience:\nHardware and embedded security experience with knowledge of secure boot, firmware integrity, hardware root of trust, and IoT threat modeling experience.\nExperience in the Financial industry, knowledge of PCI DSS, COPPA or demonstrated ability to learn regulated domains quickly.\nWork perks at Greenlight:\nMedical, dental, vision, and HSA match \nPaid life insurance, AD&D, and disability benefits \nTraditional 401k with company match\nUnlimited PTO \nPaid company holidays and pop-up bonus holidays \nProfessional development stipends\nMental health resources \n1:1 financial planners\nFertility healthcare\n100% paid parental and caregiving leave, plus cleaning service and meals during your leave\nFlexible WFH, both remote and in-office opportunities\nFully stocked kitchen, catered lunches, and occasional in-office happy hours\nEmployee resource groups","description_format":"text","description_chars":5212,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance","Professional development","Unlimited PTO"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Personal Finance Apps & Education","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-06-25T20:05:35Z"}],"visa":[],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.678,"p_room":0.28,"age_days":129,"expected_fill_days":57,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/greenlight-financial-technology-staff-product-security-engineer-2","json_url":"https://alion.io/job/greenlight-financial-technology-staff-product-security-engineer-2.json","meta":{"generated_at":"2026-11-02T07:09:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10030,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":717037},"rest":"https://alion.io/mcp/rest/get_company?id=717037"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgreenlight-financial-technology-staff-product-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgreenlight-financial-technology-staff-product-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgreenlight-financial-technology-staff-product-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/greenlight-financial-technology-staff-product-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgreenlight-financial-technology-staff-product-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":124391}},{"tool":"search_jobs","arguments":{"company":"greenlight.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":124391},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}