Senior Product Security Engineer

Function Health
United States
Workplace: RemoteFull timeFunction: CybersecurityExperience: 5+ yearsSkills: ["Proactivity","Growth mindset","Risk-focused mindset","Clear documentation","Collaboration"]

Build and deploy AI-powered security agents and tooling across CI/CD to raise the security bar without slowing teams down. You’ll operate security layers like SAST, SCA, secrets scanning, IaC validation, and supply-chain integrity checks, while performing threat modeling and secure design reviews. Lead proactive vulnerability discovery and remediation, connect telemetry to detection/response, and support incident response and long-term product security strategy.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Function Health
Function Health
5 days ago

Senior Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 9 hours agoStatus: Live
Reposted: similar role first listed 3 months ago

Job Summary

Build and deploy AI-powered security agents and tooling across CI/CD to raise the security bar without slowing teams down. You’ll operate security layers like SAST, SCA, secrets scanning, IaC validation, and supply-chain integrity checks, while performing threat modeling and secure design reviews. Lead proactive vulnerability discovery and remediation, connect telemetry to detection/response, and support incident response and long-term product security strategy.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Design and deploy AI-powered security agents into CI/CD, including automated code review, risk classification, escalation logic, and auto-remediation where possible.
  • •Build and operate the security tooling layer across pipelines, covering SAST, SCA, secrets scanning, IaC validation, and supply chain integrity checks.
  • •Conduct threat modeling, secure design reviews, and manual security assessments across apps, APIs, and infrastructure.
  • •Proactively find vulnerabilities through testing (not just scanner output) and drive them to remediation.
  • •Partner with engineering teams as the embedded security voice and own secure-by-default development frameworks and rollout.

Key Requirements

  • •5+ years of experience in product or application security and/or software engineering.
  • •Built or operated AI-assisted security tooling such as agents for code review or automated triage pipelines.
  • •Strong Python experience; familiarity with FastAPI, LangChain, or agentic frameworks is a plus.
  • •Deep expertise identifying and exploiting web, API, and application vulnerabilities beyond OWASP Top 10.
  • •Experience embedding security into CI/CD (not just advising) and guiding secure design decisions.
Experience:5+ years
Skills:ProactivityGrowth mindsetRisk-focused mindsetClear documentationCollaboration
Tech Stack:PythonFastAPILangChainCI/CDSASTSCASecrets scanningIaCOWASP Top 10Supply chain integrity checksTelemetryDetection and response

Company Brief

Function Health
Function Health develops digital health solutions to support chronic disease management, delivering personalized care pathways, remote monitoring, and patient engagement tools to improve outcomes and reduce healthcare costs for people with long-term conditions.
Industry: HealthTech
Website