Product Security Engineer

This is a fully remote position, open to applicants in California, +1 more state.

📋 Description

• Define, lead, and implement the security roadmap encompassing all elements of Security.

• Enhance and strengthen Latent’s cloud infrastructure for security and compliance, establishing a secure-by-default approach.

• Empower employees to utilize AI-driven tools in a secure and compliant manner.

• Safeguard Latent’s data warehouse while ensuring patient security and privacy are maintained.

• Automate security measures throughout the Software Development Life Cycle (SDLC) and establish security requirements for new application and agentic platform features.

• Protect employee devices and applications, managing user lifecycle provisioning, just-in-time access, elevated access provisioning, and device hardening.

• Investigate potential security incidents, develop environment-specific detections, and enhance the accuracy of escalated incidents using the AI-native Managed Detection and Response (MDR) service.

• Collaborate with engineering, product, legal, Go-To-Market (GTM), IT teams, developers, and employees across the organization.

⛳️ Requirements

• Proven experience in various security domains, including cloud, AI, data, application/product security, IT security, and incident response.

• Proficiency in designing, developing, and implementing security automations and workflows utilizing AI.

• Understanding of basic engineering principles and ability to leverage coding agents to directly contribute solutions to the codebase.

• Hands-on experience in building Identity and Access Management (IAM) workflows using Okta, Single Sign-On (SSO), Security Assertion Markup Language (SAML), and Just-In-Time (JIT) provisioning.

• Background in designing and implementing managed settings for AI tools and coding agents.

• Experience collaborating with developers to produce secure code and features.

• Expertise in hardening AWS cloud and Continuous Integration/Continuous Deployment (CI/CD) environments to comply with CIS standards.

• Experience in selecting Cloud Security Posture Management (CSPM) tools and mitigating security findings backlogs.

• Proven ability to build and sustain vulnerability management programs across servers, containers, open-source software (OSS), and custom code.

• Experience in automating security and compliance requirements for macOS and Bring Your Own Device (BYOD) endpoints using Mobile Device Management (MDM).

• Aptitude for investigating security alerts and incidents, as well as writing and fine-tuning relevant detections.

• Early-stage startup security experience is a plus.

• Familiarity with healthcare data and HIPAA is desirable.

• Experience in participating in or developing controls for SOC 2 audits is advantageous.

🏝️ Benefits

• Competitive salary, including significant equity options.

• Comprehensive medical, dental, and vision insurance for employees and their dependents.

• Flexible Paid Time Off (PTO) policy.

• Paid parental leave.

• Fertility and family-building stipend provided through Carrot.