Senior Security Engineer - Product Security
New
O
Ondo FinanceFintech / Blockchain
Location: Remote (US)Full-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years in Product Security or Application Security
- Required Skills
- PythonTypeScriptGo
Requirements
- 5+ years of experience in Product Security or Application Security in a fast-moving product company.
- Deep secure code review skills in at least one modern stack: TypeScript, JavaScript, Python, or Go.
- Strong threat modeling capabilities with experience driving decisions in collaboration with engineering.
- Practical experience managing or contributing significantly to an AppSec tooling program.
- End-to-end experience running or building a bug bounty or responsible disclosure program.
- Strong knowledge of modern web and API security, including OAuth, OIDC, and browser security models.
- Ability to reason about infrastructure risk by reading Terraform, cloud IAM policies, and CI/CD configurations.
- Strong engineering partnership and communication skills.
- Willingness to grow into blockchain-adjacent product security, including understanding wallet and signing flows.
Responsibilities
- Drive threat modeling for new features, integrations, and architectural changes.
- Own secure code review for high-risk areas including authentication, session management, and cryptographic flows.
- Expand and tune the AppSec tooling stack to reduce false positives.
- Design and evolve the secure software development lifecycle (SSDLC) and security sign-off processes.
- Manage the responsible disclosure and bug bounty program end-to-end.
- Coordinate remediation of external audit and pentest findings with engineering teams.
- Partner with engineering leads to implement secure-by-default patterns and libraries.
- Threat model blockchain-integrated components such as wallet flows and signing infrastructure.
View Full Description & ApplyYou'll be redirected to the employer's site
