Senior Security Engineer, Product Security

A senior product security engineer at GoodLeap who owns product security outcomes for the business units assigned, within a regulated consumer-finance product. Time is split between building production security services and tooling in TypeScript, Node.js, .NET or Python and reviewing others' work: threat modelling designs, triaging pull request findings and manually testing web apps and APIs. A core duty is attacking the company's LLM and agent features through prompt injection, jailbreaks and tool abuse, and helping decide when they are safe to launch. The role also tunes SAST and dependency scanning and supports incident response.

GoodLeap wants strong backend coding, a deep grasp of how authentication and authorization break, AWS and infrastructure-as-code skills, and some hands-on AI security testing. No visa sponsorship.