{"id":25446,"url":"https://alion.io/job/rogo-security-engineer-product-2","title":"Security Engineer, Product","company":{"id":48476,"name":"Rogo","domain":"rogo.com","url":"https://alion.io/company/rogo","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":80,"open_postings":72,"ghost_share":0.25,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":69,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":270000,"max":330000,"currency":"USD","period":"year","gross":null,"usd_annual":330000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Burp Suite","optional":false},{"name":"C++","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"NIST CSF","optional":false},{"name":"Nuclei","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Rust","optional":false},{"name":"Semgrep","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2025-10-07T00:10:54Z","employer_posted_date":"2025-10-07","last_verified_at":"2026-10-16T18:31:52Z","board_verified":true,"closed_at":null,"days_open":374,"trust":{"level":"ghost","repost_count":1,"flags":["stale","company_stale"],"days_open":374},"description":"Why Rogo\nOur mission is to transform global finance by empowering professionals at the world's top investment banks, private equity funds, and investment firms with AI that delivers unparalleled speed, accuracy, and insight. We're not just improving financial workflows; we're redefining them.\nThis is a unique opportunity to join a generational company driving transformation in one of the most important industries in the world. With a rapidly growing, global client base, proven product-market fit, and backing from world-class investors, we are scaling quickly and defining a new category of enterprise AI.\nOur team is sharp, motivated, and deeply committed to Rogo’s mission. We take ownership of complex problems and stay relentlessly focused on our users. If you thrive in a fast-paced environment, demand excellence, and want to help build the future of finance, we invite you to join us.\nThe Role\nAs a Security Engineer at Rogo, you'll be our hands-on offensive security practitioner, focused on breaking our products before adversaries do. You'll conduct deep-dive penetration testing, red team exercises, and adversarial security assessments against our AI-driven platform, APIs, and cloud infrastructure, then turn those findings into engineering solutions that harden the product at its core.\nRather than gatekeeping releases through manual AppSec reviews, you'll build intelligent security automation to scale offensive testing, triage findings, and embed continuous security validation directly into the engineering workflow. You'll partner with development teams not just as a reviewer, but as a security engineer who contributes to the codebase, improves our systems, and raises the bar for what \"secure by default\" means at Rogo.\nWhat You Will Own\nYou will be Rogo's primary offensive security capability, finding, exploiting, and eliminating vulnerabilities across our products, APIs, and infrastructure before external attackers or penetration testers do.\nConduct hands-on penetration testing and red team assessments against Rogo's applications, APIs, AI/ML pipelines, and cloud environments on a continuous basis, not just during annual engagements.\n\nBuild agentic security tooling that finds, validates, and patches vulnerabilities end-to-end, minimizing manual intervention across code review, dependency management, and IaC.\n\nDevelop and maintain custom offensive tooling, exploit chains, and attack simulations tailored to Rogo's AI platform and architecture.\n\nBuild and operate automated security testing and remediation pipelines that scale offensive coverage without linearly scaling headcount.\n\nPerform deep adversarial testing of AI-specific attack surfaces: prompt injection, model manipulation, data poisoning vectors, agent-based workflows, and tenant isolation boundaries.\n\nOwn vulnerability research and bug hunting across the product, go beyond scanner output to find the logic flaws, auth bypasses, and chained exploits that automated tools miss.\n\nDesign and execute threat modeling sessions with engineering teams, translating offensive findings into concrete, prioritized remediation that ships in the same sprint.\n\nBuild attack simulation environments and continuously validate security controls against real-world TTPs and customer-driven pen test scenarios.\n\nContribute directly to backend codebases, fix critical vulnerabilities, harden authentication and authorization flows, and build security primitives into the platform.\n\nLead purple team exercises: collaborate with infrastructure and engineering teams to test detection and response capabilities against your offensive scenarios.\n\nOwn the relationship with external pen test firms and drive remediation of findings to closure.\n\nShare offensive tradecraft, emerging attack techniques, and lessons learned with engineering and leadership to continuously raise security awareness.\n\nGreat Candidates Often:\nHave professional penetration testing experience across web apps, APIs, cloud environments, and ideally AI/ML systems. You've written real exploits, not just run scanners.\n\nHave built or are excited to build agentic security tooling that autonomously finds, validates, and patches vulnerabilities, minimizing human-in-the-loop remediation.\n\nHave professional development experience in a strongly typed language (e.g., Rust, Go, Java, C++) alongside scripting languages (Python, Bash) for exploit development and tooling.\n\nAre comfortable with Burp Suite, Nuclei, Semgrep, custom fuzzing frameworks, and building your own tools when off-the-shelf doesn't cut it.\n\nHave integrated automated security checks into CI/CD pipelines (SCA, SAST, DAST) and understand how to give developers fast, actionable feedback without blocking velocity.\n\nAre comfortable with infrastructure automation (Terraform, Kubernetes) and can identify misconfigurations and attack paths in AWS/GCP environments.\n\nCommunicate crisply and can collaborate effectively with developers, product teams, and leadership.\n\nHave applied knowledge of threat modeling, cryptography fundamentals, and compliance frameworks (SOC 2, ISO 27001/42001, NIST CSF).\n\nBonus:\nOSCP, OSWE, GXPN, GWAPT, CPTS, or similar offensive security certifications.\n\nExperience testing multi-tenant SaaS platforms serving regulated industries (financial services is a strong plus).\n\nHands-on cloud penetration testing experience in AWS or GCP (privilege escalation, cross-account attacks, metadata abuse).\n\nKubernetes security testing (RBAC abuse, container escapes, admission controller bypasses, network policy evasion).\n\nBug bounty track record or published CVEs / security research.\n\nExperience in customer-facing security conversations, deep-dive technical sessions, pen test debrief calls, and security architecture reviews.\n\nWho You Are\nYou thrive in fast-paced environments. You are high-intensity and care a lot about what you do, and you're ecstatic to work at a startup.\n\nYou are ambitious. You have fun solving problems that others think are impossible.\n\nYou are curious. You find joy in learning about AI, technology, and finance.\n\nYou are an owner. You are autonomous, self-directed, and comfortable working with ambiguity.\n\nYou are collaborative, organized, thoughtful, and kind.\n\nWhy Join Rogo?\nUp and to the right: Rogo has strong product adoption with the world's leading financial institutions, and we are still early. The upside is enormous.\n\nExtraordinary team: we take talent density seriously. You'll do the best work of your career alongside some of the sharpest people in AI and finance.\n\nA one-of-one problem: bringing AI to the core of how Wall Street works is one of the most ambitious, technically demanding, and consequential problems today. There is nowhere else you can work on it at this scale.\n\nReal ownership: You'll own real surface area and watch the world's most sophisticated users rely on your work.\n\nAlways at the frontier: we work at the edge of what the best models can do and turn it into products people trust. If you're obsessed with AI, this is where it's happening.","description_format":"text","description_chars":7054,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Financial Software & Embedded Finance","Financial AI"],"lifecycle":[{"event":"open","at":"2025-10-07T00:10:54Z"},{"event":"close","at":"2026-10-12T09:37:01Z"},{"event":"reopen","at":"2026-10-14T07:10:40Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.203,"p_room":0.28,"age_days":374,"expected_fill_days":69,"reasons":["conf:1","velocity","ghost","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":330000,"is_top_pay":true},"html_url":"https://alion.io/job/rogo-security-engineer-product-2","json_url":"https://alion.io/job/rogo-security-engineer-product-2.json","meta":{"generated_at":"2026-10-16T19:09:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4667,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48476},"rest":"https://alion.io/mcp/rest/get_company?id=48476"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frogo-security-engineer-product-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frogo-security-engineer-product-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frogo-security-engineer-product-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rogo-security-engineer-product-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frogo-security-engineer-product-2"}]}