Senior Product Security Engineer
Doppel · US Remote
About this role
## Senior Product Security Engineer ### About Doppel Doppel is building the future of social engineering defense. Our AI-native platform uses agentic AI to protect executives, employees, customers, and brands from phishing, impersonation, fraud, and other AI-powered threats across digital channels. We help recognized brands detect and dismantle attacker infrastructure while strengthening employee resilience through threat-informed training and simulation. ### The Role As a **Product Security Engineer**, you’ll support and scale product and cloud security by embedding security into engineering workflows and acting as a subject matter expert. You’ll partner with engineering teams on architecture reviews, design secure solutions, improve and maintain security tooling and guardrails, and help shape a modern security program—especially in a world where code is increasingly written by AI. This role emphasizes both **hands-on execution** and **enablement** (guidance, documentation, mentorship, clear communication, and reporting to security leadership). **Location:** Remote across the U.S. and Canada, or hybrid from **New York, San Francisco, or Toronto**. ### What You Will Do - Partner with product and engineering teams on **architecture reviews**, **threat modeling**, and **secure design**, translating risks into practical recommendations and tradeoffs. - Evaluate and roll out **AI-assisted and agentic security workflows** to increase coverage and accelerate reviews, triage, and remediation—with appropriate validation and human oversight. - Improve and maintain **first- and third-party security tooling** (including an in-house ASPM platform) to reduce noise, improve prioritization, and make findings easier to act on. - Strengthen security controls across the **SDLC and CI/CD pipeline**, including code/dependency scanning, software supply chain protections, and safeguards for AI-assisted development. - Serve as a **GCP security subject matter expert**, advising on secure patterns for networking, data protection, secrets management, workload runtimes, and logging/monitoring. - Partner with infrastructure and engineering teams to implement **least-privilege IAM**, secure workload identities, and durable guardrails via policy and infrastructure-as-code. - Drive **vulnerability management** end-to-end: validate findings, assess risk, establish ownership, track remediation against SLAs, and document exceptions/risk acceptance. - Coordinate **penetration testing** engagements: vendor selection, scoping, logistics, findings validation, and remediation/retesting. - Shape and scale the product security program by identifying gaps, prioritizing improvements, and communicating risk, progress, and outcomes. - Enable engineers through practical documentation, reusable guidance, targeted training, and mentorship. ### What We Are Looking For - **5–7 years** of experience in product security, cloud security engineering, software development, or related. - Practical experience applying **AI and agentic workflows** to accelerate security reviews, vulnerability triage, and remediation, with strong understanding of AI-assisted development risks. - Strong knowledge of **Google Cloud Platform (GCP)** security best practices (IAM, networking, data protection, workload runtimes). - Hands-on experience with **penetration testing coordination**, **threat modeling**, and **risk assessment**. - Proficiency in **Python** and cloud-native scripting/programming to bui
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.