Staff Application & Product Security Engineer

Nice to Have

• Securing LLM applications, AI agents, or AI-assisted development tools.
• SBOM (CycloneDX/SPDX), VEX, artifact signing, and SLSA.
• AWS, Kubernetes/EKS, Terraform, Jenkins.
• Snyk, GitHub Advanced Security, Semgrep, Burp Suite.
• NIST CSF 2.0, OWASP SAMM/ASVS, NIST SSDF; supporting SOC 2 or ISO 27001 audits.
• CSSLP, OSWE, GWAPT, AWS Security, or comparable certifications.
• Enterprise software with both SaaS and customer-hosted deployment models; SSO/SAML, RBAC design, and multi-tenant isolation; MFT/EDI or other B2B integration products.
• A few things we have to offer:
• Compensation: $160,000 to $180,000 + Bonus Opportunity
• Great Healthcare + Dental + Vision
• Flexible PTO
• Culture of support, encouraging Life-Work balance
• 401k match
• FSA and HSA options
• Employee Assistance Program
• Paid Parental Leave
• Remote work environment
• Representing a company with 4,000+ clients and a 99% retention rate
• Accelerated title and salary growth potential
• A fun and energetic work environment that makes you excited to go to work every day
• We use artificial intelligence (AI) tools to assist in certain stages of our recruitment process, such as resume screening and candidate matching. These tools are designed to support fair and consistent evaluations. If you have questions about this process or would like to request an alternative assessment method, please contact us at [email protected].
• Cleo Communications US, LLC is an equal opportunity/affirmative action employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law.