Staff Security Engineer, Product Security

Requirements

• 8+ years of application security engineering experience
• Strong production coding ability in at least one of Java (preferred), TypeScript/JavaScript, Python, or Go
• Building security automation into CI/CD pipelines
• Hands-on penetration testing of production SaaS applications
• Threat modeling, secure design reviews, and static/dynamic code analysis
• Identifying and remediating common web application vulnerabilities (OWASP Top 10)
• Experience securing internal AI/LLM platforms and coding agents

Nice to Haves

• Experience in Web3, Blockchain or Digital Assets
• Experience building AI workflows, agents, and guardrailing

What you'll Be Doing

• Lead Product Security across Chainalysis' SaaS offerings
• Own Unified Security Review process for new product launches
• Drive Security Engineering Risk Management Framework
• Lead the Vulnerability Disclosure Program
• Drive SOC2 and compliance-related security remediation
• Provide security review and guardrails for internal AI platforms
• Participate in a shared on-call rotation for high-severity production security incidents

Technologies we Use

• Cloud and containers: AWS, GCP, Kubernetes (EKS/GKE)
• Infrastructure-as-Code: Terraform
• Security tooling: Wiz, SonarCloud, Burp, Cloudflare
• CI/CD and source control: GitHub, GitHub Actions, Artifactory
• Languages and scripting: Java, JavaScript, Python, Go
• AI Coding Agents, Tooling, Systems