{"id":1984970,"url":"https://alion.io/job/ridgeline-senior-security-engineer-product","title":"Senior Security Engineer - Product","company":{"id":1547962,"name":"Ridgeline","domain":"ridgeline.ai","url":"https://alion.io/company/ridgeline","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":10,"ghost_share":0,"stale_share":0.6,"repost_share":0,"time_to_fill_p50_days":53,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Ramon, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":149500,"max":224500,"currency":"USD","period":"year","gross":null,"usd_annual":224500},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Threat Modeling","optional":false},{"name":"AWS","optional":true},{"name":"AWS Lambda","optional":true},{"name":"CWE","optional":true},{"name":"Embeddings","optional":true},{"name":"IAM","optional":true},{"name":"Java","optional":true},{"name":"Kotlin","optional":true},{"name":"OWASP","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"Python","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-10-07T00:11:55Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-14T16:41:23Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Senior Security Engineer - Product Security\nLocation: San Ramon, CA; Reno, NV\nRidgeline is looking for an experienced Product Security Engineer to join our growing Security Engineering team and help us build security into the products our clients rely on. As a Senior Security Engineer at Ridgeline, you will partner with product and engineering teams to identify and solve security problems in our multi-tenant investment management platform, from early design through production.\nThis is a hands-on role, ideal for someone who enjoys going deep on how products work, finding the ways they can break, and shipping fixes, guardrails, and automated systems alongside the engineers who own them. You’ll be the security partner for key product areas, helping teams make sound security decisions without slowing them down.\nRidgeline places a strategic emphasis on the responsible and innovative use of AI, integrating it deeply into our platform, internal tools, and engineering processes. A core part of this role is building AI-driven systems that let a small security team cover a large, fast-moving product surface: automating security review, triage, and remediation so every product team gets security support, not just the ones we can reach in person. You will also help secure the AI-powered features we ship to clients, including LLM integrations, agents, and retrieval pipelines.\nWhat will you do?\nPerform security code reviews and hands-on testing of product features, with a focus on authentication, authorization, tenant isolation, and handling of sensitive financial data.\nOwn the product vulnerability lifecycle: triage findings from scanners, penetration tests, assess real-world impact, and drive remediation with engineering teams.\nBuild and improve secure-by-default libraries, frameworks, and guardrails that make the secure path the easy path for product engineers.\nDesign, build, and operate AI-driven systems, such as LLM- and agent-based pipelines for security code review, threat modeling, vulnerability triage, and remediation, that scale product security coverage across all engineering teams.\nMeasure the quality of these systems with clear evaluations and feedback loops, and iterate until engineers trust their output.\nAssess the security of AI-powered product features, including prompt injection, data leakage, and model or tool misuse risks.\nTranslate emerging threats and industry vulnerabilities into concrete improvements for Ridgeline’s products.\nMentor engineers and lead secure coding education tailored to the product areas you support.\nFoster a collaborative environment rooted in learning, teaching, and trust.\n\nDesired Skills and Experience:\n5+ years of experience in product security, application security, or software engineering roles.\nBachelor’s degree in Computer Science or a related discipline, or equivalent practical experience.\nProficiency in one or more modern programming languages (e.g., Kotlin/Java, TypeScript, Python, Go), with the ability to read unfamiliar codebases and write fixes.\nHands-on experience running threat models and security design reviews for web applications, APIs, and distributed services.\nStrong understanding of authentication and authorization patterns (OAuth 2.0, OIDC, SAML, RBAC/ABAC) and how they fail in practice.\nIn-depth understanding of common application and API vulnerabilities (OWASP Top 10, OWASP API Security Top 10, CWE) and practical mitigation strategies.\nExperience performing manual security testing and code review, and validating findings from automated tools.\nClear, thoughtful communicator who can explain security risk and tradeoffs to engineers, product managers, and leadership.\nStrong sense of ownership, with a track record of driving security fixes to completion across teams.\nExperience working closely with product teams, balancing security requirements against delivery timelines and user experience.\nAI security fluency: can evaluate risks tied to LLM-powered features, agents, embeddings, and third-party model APIs.\nExperience building production software or automation that integrates LLMs or agents into real workflows, including prompt and tool design, evaluation, and handling of false positives and failure modes.\nNice to haves:\nExperience securing multi-tenant SaaS platforms, ideally in financial services or another regulated industry.\nFamiliarity with AWS, particularly around IAM, container services, Lambda, and related infrastructure.\nExperience running a bug bounty program or triaging findings from third-party penetration tests.\nExperience with agent frameworks, retrieval pipelines, or LLM evaluation tooling, or a portfolio of AI-driven security projects (open source, research, or internal tools).\nSecurity research, CVEs, bug bounty participation, open-source contributions, or other community involvement.\nCompensation and Benefits \nThe typical starting salary range for this role is: $149,500 - $224,500. Final compensation amounts are determined by multiple factors, including candidate experience and expertise, and may vary from the amount listed above. \nAs an employee at Ridgeline, you’ll have many opportunities for advancement in your career and can make a true impact on the product. \nIn addition to the base salary, Ridgeline employees can participate in our Company Stock Plan subject to the applicable Stock Option Agreement. We also offer rich benefits that reflect the kind of organization we want to be: one in which our employees feel valued and are inspired to bring their best selves to work. These include unlimited vacation, educational and wellness reimbursements, and $0 cost employee insurance plafis. Please check out our Careers page for a more comprehensive overview of our perks and benefits.\nAbout Ridgeline\nRidgeline is building the next generation of investment management technology. Founded by Tech visionary Dave Duffield, Ridgeline delivers a modern, cloud-native platform designed to transform how investment firms operate. \nAs AI reshapes the future of work, Ridgeline is investing deeply in enabling every employee - across technical, operational, and business functions - to adopt and leverage AI skillfully. We believe AI transformation is not simply about deploying tools; it’s about fundamentally evolving how organizations learn, operate, and make decisions.\nTo help lead that transformation, we’re building a new AI Enablement function focused on enterprise-wide learning, workforce transformation, and organizational adoption.\nRidgeline is proud to be a community-minded, discrimination-free equal opportunity workplace.\nRidgeline processes the information you submit in connection with your application in accordance with the Ridgeline Candidate Privacy Policy. Please review the Ridgeline Candidate Privacy Policy in full to understand our privacy practices and contact us with any questions.","description_format":"text","description_chars":6869,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Financial Services","Asset Management & Funds","Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-10-07T01:54:49Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4 · green card filings: 2","filings_12m":4,"filings_prev_12m":3,"green_card_filings_12m":2,"median_offered_wage_usd":167500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":7,"expected_fill_days":53,"reasons":["conf:2","stale_co","velocity","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":224500,"is_top_pay":true},"html_url":"https://alion.io/job/ridgeline-senior-security-engineer-product","json_url":"https://alion.io/job/ridgeline-senior-security-engineer-product.json","meta":{"generated_at":"2026-10-14T18:12:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23577,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1547962},"rest":"https://alion.io/mcp/rest/get_company?id=1547962"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fridgeline-senior-security-engineer-product"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fridgeline-senior-security-engineer-product"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fridgeline-senior-security-engineer-product"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ridgeline-senior-security-engineer-product\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fridgeline-senior-security-engineer-product"}]}