> Markdown version of [/jobs/ext/3607126-security-engineer-product-infrastructure](https://www.wearedevelopers.com/jobs/ext/3607126-security-engineer-product-infrastructure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer, Product & Infrastructure - **Company:** SQUAD MULTISERVICES LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $175,000.0 - $220,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Computer Animation, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Business Logic, Configuration Management Databases, Code Review, Databases, Continuous Integration, Distributed Systems, Identity and Access Management, Information Technology Operations, Python (Programming Language), Key Management, Public Key Infrastructure, Systems Development Life Cycle, Secure Coding, Server Administration, Software Engineering, TypeScript, Software Vulnerability Management, Cloud Platform System, Data Ingestion, ServiceNow IT Service Management, Large Language Models, Software Security, Zapier, Backend, Material UI, Integration Frameworks, Front End Software Development, ArcSight Event Correlation, AIOps, Servicenow, Static Application Security Testing - **Published:** October 7, 2026 - **Apply:** https://www.builtincolorado.com/auth/login?destination=/job/senior-security-engineer-product-infrastructure/11534829 ## About the Role * 8+ years in product security, application security, or security engineering, built on a software engineering foundation * Ownership of threat modeling and architecture review for complex financial or distributed systems, with the standing to shape design decisions * A track record of finding critical, non-obvious vulnerabilities in large production codebases (TypeScript, Rust, Go, or Python), including through LLM and agent-based review workflows you built and ran * Experience building and running a vulnerability management program or bug bounty end to end, including the CI/CD scanning that feeds it * Deep expertise in IAM, secrets management, network controls, and container security on AWS or a comparable provider * Strong written communication and the judgment to work independently * Experience reviewing Solana programs (Rust/Anchor) or working at an audit firm, cryptography and key management (HSMs, MPC, PKI), offensive testing across web and mobile, red teaming AI systems, or supporting SOC 2 from the product side is a plus. ## Description You'll own product and infrastructure security across Squads, working closely with our Head of Security, CTO, and engineering leads across Multisig, Altitude, Fuse, and the infrastructure that powers them. That means being in the room when systems are designed, reviewing code before it ships, and driving every finding to verified closure. This is a hands-on role. You'll read code, write threat models, and build the tooling and standards that make the secure path the default as engineering grows. We're looking for a senior practitioner who can tell engineers what to fix and why, and hold the line on what matters without slowing the team down. What You'll OwnDesign & Code Review * Join product and engineering calls as the security reviewer, raising concerns while designs are still cheap to change * Lead threat modeling and security design reviews for new products, features, and infrastructure changes * Perform hands-on secure code review across backend services, APIs, frontends, and Solana programs, with a focus on authentication, authorization, and access control Vulnerability Management * Own the full lifecycle for findings from audits, pentests, code scanning, and bug bounty: triage, prioritization, remediation tracking, and fix verification * Set severity and SLA standards, and hold the team to them * Run bug bounty intake, validate external reports against source, coordinate with audit partners, and scope internal assessments Secure SDLC & Infrastructure * Tune and extend SAST, dependency, secrets, and container scanning in CI/CD so engineers trust the signal * Review IAM, network controls, encryption, and secrets management across our cloud environments, including API key ownership, permissions, and rotation * Assess what internal AI tools, MCP integrations, and agents can reach in production, and scope their access to what they need * Define product security standards, review checklists, and developer guidance that scale with the team You Might Be Right For This If * You've been the senior security partner to engineering leadership, and teams sought out your review instead of routing around it * You find business logic, authorization, and race condition bugs by reading code, and you know where scanners go blind * You use LLMs and agents to cover far more code than one person could, and you know where the models miss * You rank findings by what an attacker could actually do with them, and your write-ups tell engineers exactly what to change * You've worked where security failures carry direct financial impact: fintech, crypto, payments, or stablecoins * You've built a security function early, when the process and tooling still needed to be defined * You pick your battles, and engineers ship faster with you in the room, Most product security roles sit downstream of engineering, reviewing what's already been decided. This one sits in the room. You'll shape how a self-custody platform, a business account, a consumer app, and the infrastructure under all of them get built, across Solana programs and traditional backend services alike. The stakes are concrete: a missed authorization check here moves money. You'll work directly with our Head of Security and CTO, with the ownership to build the product security program while operating it., Serve as a strategic People Business Partner for Data and Product leaders, owning organizational design, workforce planning, talent reviews, performance management, change management, and employee relations. Advise leaders on complex performance cases, exits, investigations, and employment matters across multiple EMEA jurisdictions. Drive people processes, partner with Centers of Excellence, support employee relations initiatives, and use AI-enabled tools to improve productivity and scalability in a fully remote environment. Top Skills: Ai ToolsAutomation Pfizer Manager, ServiceNow ITOM Engineer 2 Days Ago In-Office or Remote Mid level Mid level Artificial Intelligence * Healthtech * Machine Learning * Natural Language Processing * Biotech * Pharmaceutical Configure, develop, integrate, and maintain ServiceNow ITOM solutions, including Discovery, Service Mapping, CMDB, CSDM, Event Management, and AIOps. Support product roadmaps, event correlation, automation, predictive incident detection, third-party integrations, MID Server management, troubleshooting, documentation, and CMDB data ingestion. The role partners with cross-functional teams and applies infrastructure, application, database, networking, cloud, and distributed-systems knowledge to improve IT operations visibility and efficiency. Top Skills: AiopsAPIsCmdbCsdmEvent ManagementMid ServerPaasSaaSService MappingServicenow DevelopmentServicenow DiscoveryServicenow ItomSQL, Zapier