{"id":4229931,"url":"https://alion.io/job/rapsodo-product-security-engineer","title":"Product Security Engineer","company":{"id":686461,"name":"Rapsodo","domain":"rapsodo.com","url":"https://alion.io/company/rapsodo","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":93,"open_postings":15,"ghost_share":0,"stale_share":0.267,"repost_share":0,"time_to_fill_p50_days":54,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["İzmir, Turkey"],"countries":["TR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"C++","optional":false},{"name":"Computer Vision","optional":false},{"name":"Frida","optional":false},{"name":"Ghidra","optional":false},{"name":"Kotlin Multiplatform","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Wireshark","optional":false},{"name":"AWS","optional":true},{"name":"C","optional":true},{"name":"CoAP","optional":true},{"name":"GCP","optional":true},{"name":"IAM","optional":true},{"name":"Kotlin","optional":true},{"name":"MQTT","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"ZeroMQ","optional":true}],"status":"live","first_seen_at":"2026-11-13T09:23:26Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T09:23:26Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Rapsodo is a global sports technology company with offices in Singapore, the United States, Türkiye, Japan, and Malaysia. We develop data-driven sports analytics products that combine computer vision, AI, hardware, and cloud technologies to help athletes measure, understand, and improve their performance.\nOur products deliver accurate, real-time performance insights in demanding environments, supporting professional athletes, coaches, and sports organizations around the world.\nAt Rapsodo, engineers take ownership from concept to production, working across multidisciplinary teams to build innovative products that transform complex motion into actionable insights at global scale.\nAbout the role\n Rapsodo builds sports technology used by athletes, coaches and teams worldwide, including golf and baseball launch monitors that combine computer vision, embedded hardware, mobile apps and cloud services. We are hiring a Product Security Engineer to own security validation and testing of our products end to end, with AI-driven tools and agents as the main engine of your testing.You will be the person who tries to break what we build before anyone else does. You will use AI to scale that work: generating and running test cases, fuzzing inputs, reviewing code and firmware, and triaging results. You will collaborate closely with our cloud, mobile app and device teams, turning findings into fixes and building the test practice that keeps every release secure.\n\nWhat You'll Do\n\nThreat Modeling: Build and maintain threat models across cloud, mobile, network, and device components, defining security priorities with engineering leads.\nCloud and API Security Testing: Test backend services and APIs for authentication, authorization, token handling, account and subscription abuse, and cloud misconfigurations.\nMobile Application Security Testing: Assess Android and iOS applications, including native and Kotlin Multiplatform apps, for vulnerabilities such as insecure storage, log leakage, reverse engineering, tampering, and certificate pinning bypass.\n Wireless and Network Security Testing: Assess Bluetooth Low Energy (BLE), Wi-Fi provisioning, and local network protocols, focusing on secure pairing, MITM resistance, and channel encryption.\nDevice and Firmware Security Testing: Evaluate embedded Linux devices on ARM platforms, including secure boot, firmware integrity, key storage, debug interfaces, and service-level privilege separation.\nLicensing and Entitlement Testing: Identify ways to bypass feature and subscription enforcement through modified clients, replayed tokens, or altered firmware.\nSecurity Test Automation: Use AI agents and LLM-based tools to generate, execute, and analyze security tests, integrating automated checks such as SAST, dependency and SBOM scanning, fuzzing, and regression testing into CI pipelines.\nVulnerability Reporting and Remediation: Document findings with severity levels and reproduction steps, collaborate with cloud, mobile, and device teams on fixes, and verify remediation.\nExternal Security Coordination: Coordinate third-party penetration tests and manage vulnerability reports submitted by external researchers.\n Security Strategy and Continuous Improvement: Contribute to product security standards, testing strategies, and the continuous improvement of security practices across Rapsodo's products.\nWhat We're Looking For\nHands-on experience or solid knowledge of security testing through professional experience, internships, university projects, CTFs, or personal labs.\nStrong curiosity about security vulnerabilities across cloud APIs, mobile applications, wireless communication (BLE, Wi-Fi), and embedded Linux devices.\nExperience with or a strong interest in using AI tools and LLM agents to generate, execute, and analyze security tests.\nGood understanding of security fundamentals, including TLS, certificates, authentication, authorization, encryption, and signed tokens.\nFamiliarity with tools such as Burp Suite, Wireshark, Frida, or Ghidra; hands-on experience is a strong plus.\nComfort working with Linux and ability to read and write code in Python; C/C++ knowledge is a plus.\nAwareness of OWASP Top 10 and similar application security guidelines.\nClear written English and the ability to explain security findings so developers can reproduce and resolve them.\nBachelor's degree in Computer Engineering, Computer Science, or a related field, or equivalent practical experience. Final-year students are also welcome to apply.\nNice to Have\nProfessional experience in product security, penetration testing, or security engineering, particularly with connected products or IoT.\nHardware security testing experience, including UART/JTAG/SWD, flash dumping, glitching, or side-channel analysis.\nFamiliarity with secure boot, TEE/TrustZone, secure elements, or TPMs on ARM platforms.\nKnowledge of IoT messaging and IPC protocols such as CoAP, MQTT, or ZeroMQ.\nExperience with fuzzing tools such as AFL++, libFuzzer, or protocol fuzzers.\nCloud security experience with AWS or GCP, including IAM, secrets management, and Infrastructure as Code reviews.\nRelevant certifications such as OSCP, OSWE, GMOB, or GXPN.\nPublished CVEs, security conference presentations, or a strong CTF track record.","description_format":"text","description_chars":5267,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Sports Analytics","Sporting Goods"],"lifecycle":[{"event":"open","at":"2026-11-13T09:23:26Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":54,"reasons":["conf:2","win:early"],"computed_at":"2026-11-13T11:40:47Z"},"pay":null,"html_url":"https://alion.io/job/rapsodo-product-security-engineer","json_url":"https://alion.io/job/rapsodo-product-security-engineer.json","meta":{"generated_at":"2026-11-13T11:40:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23501,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686461},"rest":"https://alion.io/mcp/rest/get_company?id=686461"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frapsodo-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frapsodo-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frapsodo-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rapsodo-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frapsodo-product-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4229931}},{"tool":"search_jobs","arguments":{"company":"rapsodo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4229931},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}