Real job — pulled straight from Iru’s careers page · Verified September 16, 2026 · No reposts.
Job description
Iru is hiring a Senior Product Security Engineer (Contract) — a full-time, remote role. Apply directly on Iru's careers page below.
Senior Product Security Engineer (Contract)
Team: Security and Trust
Location: USA Remote
Commitment: Full-Time
Workplace Type: remote
The Opportunity
We're seeking a highly technical Senior Product Security Engineer for a 6-month contract (40 hours/week) to embed security into the product development lifecycle. This is a hands-on engineering role responsible for identifying security risks early, partnering with development teams on remediation, conducting security reviews, performing application security testing, and helping build secure-by-design products.
This role will work closely with Engineering, Cloud Security, Infrastructure, Compliance, and Product Management to ensure security is integrated throughout the SDLC while enabling developer velocity.
What You'll Do
- Perform security design and architecture reviews for new products and features.
- Conduct threat modeling for applications, APIs, and AI-enabled services.
- Review application security posture throughout the SDLC.
- Partner with engineering teams to prioritize and remediate vulnerabilities.
- Review authentication, authorization, and access control implementations.
- Perform manual web, API, thick-client, and mobile application penetration testing.
- Validate findings from third-party penetration tests.
- Conduct secure code reviews.
- Verify remediation of security vulnerabilities.
- Drive adoption of secure coding practices.
- Partner with developers to improve security throughout the SDLC.
- Help define Product Security standards and engineering guardrails.
- Develop reusable security patterns and reference architectures.
- Triage findings from SAST, DAST, SCA, container scanning, and cloud security tools.
- Work with engineering teams to prioritize remediation.
- Track remediation SLAs and security metrics.
- Assess AI-enabled products for security risks.
- Review LLM integrations and AI workflows.
- Test AI applications for prompt injection, data leakage, insecure tool use, model abuse, and authorization weaknesses.
- Help define secure AI engineering standards.
- Improve automation of security testing throughout CI/CD.
- Integrate security tooling into developer workflows.
- Build scripts and tooling that reduce manual security work.
- Collaborate with Product, Engineering, Infrastructure, Cloud Security, and Compliance teams.
- Support customer security questionnaires related to product security.
- Assist Sales Engineering with security discussions when needed.
Application Security
Security Testing
Secure Development
Vulnerability Management
AI Security
Security Automation
Cross-functional Partnership
Qualifications
- 5+ years in Product Security or Application Security.
- Strong understanding of modern application architectures.
- Experience securing:
- Web applications
- APIs
- Microservices
- Cloud-native applications
- Experience performing threat modeling.
- Experience conducting penetration testing.
- Strong understanding of:
- OWASP Top 10
- OWASP API Top 10
- Authentication & Authorization
- OAuth / OIDC
- Secure SDLC
- Experience with SAST, DAST, SCA, and container security.
- Experience partnering directly with engineering teams.
- Strong written and verbal communication skills.
Preferred
- Experience securing AI/LLM applications.
- Experience with Kubernetes and containers.
- Familiarity with cloud security (AWS, Azure, or GCP).
- Experience with GitHub Actions or CI/CD security.
- Experience using:
- Snyk
- Burp Suite Pro
- Semgrep
- Wiz
- GitHub Advanced Security
- Security certifications such as OSCP, GWAPT, GWEB, CSSLP, or CISSP are a plus
#LI-Remote
Get Security Engineer jobs like this→
New roles from thousands of companies land hourly, straight from their careers pages. Get the freshest matches by email so you never miss one.
Email me new jobsSimilar jobs
Risk Control Specialist Engineering, Information Security & Digital Fraud Prevention
Frequently asked questions
Is Senior Product Security Engineer (Contract) at Iru a remote job?
Yes, Senior Product Security Engineer (Contract) at Iru is a remote position. This role is open to remote candidates.
How do I apply for Senior Product Security Engineer (Contract) at Iru?
You can view the full description and apply for Senior Product Security Engineer (Contract) at Iru on EchoJobs: https://echojobs.io/job/iru-senior-product-security-engineer-contract-da9jr.