Staff Security Engineer – Product Security

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Oversee Product Security for Chainalysis' SaaS products.

• Manage the Unified Security Review process for new product launches, vendor assessments, and AI tools.

• Lead the Security Engineering Risk Management Framework.

• Direct the Vulnerability Disclosure Program and the workflow for reporting security bugs.

• Propel SOC2 and compliance-related security remediation efforts.

• Offer security reviews and guidelines for internal AI platforms and coding agents.

• Engage in a shared on-call rotation for critical production security incidents.

⛳️ Requirements

• 8+ years of experience in application security engineering.

• Proficient in production coding in at least one language: Java (preferred), TypeScript/JavaScript, Python, or Go.

• Experience in integrating security automation into CI/CD pipelines.

• Practical experience in penetration testing of production SaaS applications.

• Skilled in threat modeling, secure design reviews, and static/dynamic code analysis across the software development lifecycle (SDLC).

• Ability to identify and remediate common web application vulnerabilities (OWASP Top 10).

• Familiarity with securing internal AI/LLM platforms and coding agents.

🏝️ Benefits

• Initiatives focused on diversity and inclusion.

• Accommodations available for individuals with disabilities.

• Opportunities for professional development.