Staff Application & Product Security Engineer

Job overview

The Staff Application & Product Security Engineer role is remote in the United States. Compensation is $160,000–$180,000 per year, plus a bonus opportunity. The role reports to Cleo’s CISO and partners with Engineering and the Cloud Security team to secure Cleo’s products. This senior individual contributor owns application and product security direction, building standards, controls, and automation while working with engineers on implementation. The role strengthens secure development, vulnerability response, customer-facing product security, and protections for AI-enabled product features.

What you'll do

• Own and mature the secure software development lifecycle, including security requirements, threat modeling, and design reviews
• run and tune security scanning
• build secure patterns and policy-as-code controls
• lead developer security enablement
• manage vulnerability triage, remediation, penetration testing, disclosure, and CVE processes
• own product security controls and roadmap
• respond to customer security findings and requests
• develop security controls for AI-enabled features and workflows.

What we're looking for

Skills & competencies

staff application & product security engineer

application security

product security

secure software development

threat modeling

vulnerability management

java

ai security

remote us

cleo

$160,000–$180,000/year

bonus opportunity

Work arrangement

• Weekend coverage required

Benefits & perks

• Healthcare, dental, and vision
• flexible PTO
• 401(k) match
• FSA and HSA options
• employee assistance program
• paid parental leave
• remote work environment.

Why this role

Requires six or more years in application security, product security, or secure software engineering, experience maturing an AppSec program, and strong object-oriented programming skills; Java is preferred. The posting describes a remote work environment.

About the employer

Cleo is hiring for this role. Industry: Other Scientific and Technical Consulting Services. Sector: 54.