Senior Product Security Engineer

About the role

As a Senior Product Security Engineer you will code product security across multiple areas, run security reviews, perform hands‑on pentests, ship fixes directly into product repositories and drive SOC 2 and risk‑framework work across R&D engineering. This role offers the chance to work with AI‑powered products at the intersection of blockchain data, AI and security.

Key responsibilities

• Build product security across Chainalysis SaaS offerings, partnering with product and platform engineering teams on design, code, and remediation.
• Drive security code reviews for new product launches, including custom penetration tests.
• Provide security review and guardrails for internal AI platforms and coding agents.
• Create threat models, secure design reviews, and perform static/dynamic code analysis throughout the SDLC.
• Build security automation into CI/CD pipelines.
• Participate in a shared on‑call rotation for high‑severity production security incidents.

Required profile

• 5+ years of application security engineering experience.
• Strong production coding ability in Java (preferred), TypeScript/JavaScript, Python, or Go.
• Experience building security automation into CI/CD pipelines.
• Hands‑on penetration testing of production SaaS applications, including custom tests for new launches.
• Ability to identify and remediate common web‑application vulnerabilities (OWASP Top 10).
• Experience securing internal AI/LLM platforms and coding agents.

Required skills

• Java, TypeScript/JavaScript, Python, Go.
• AWS, GCP, Kubernetes (EKS/GKE).
• Terraform, CI/CD pipelines (GitHub Actions), security tooling such as Wiz, SonarCloud, Burp, Cloudflare.
• Static and dynamic code analysis, threat modeling, secure design reviews.
• Knowledge of OWASP Top 10 vulnerabilities and SOC 2 compliance.