Close

Senior Product Security Engineer (USA Only, 100% Remote)

USA - Remote. Posted a month ago

The role

You will be the first dedicated Product Security Engineer at Close. You will find vulnerabilities, determine their impact, and drive remediation across the product and infrastructure surface.

What you will do

  • Build a recurring product security review program
  • Threat model new features and audit high-risk areas
  • Improve application security testing using static and dynamic analysis
  • Own vulnerability intake and remediation from various sources
  • Serve as technical lead for the bug bounty program
  • Automate security alert ingestion, deduplication, and routing
  • Improve dependency remediation workflows
  • Partner with Infrastructure to manage application secrets and rotation
  • Strengthen AWS security through automated detection and guardrails
  • Support audits and provide technical context for external assessments

Required qualifications

  • Application security engineer who writes code
  • Ability to move from reading code to reproducing exploits and shipping fixes
  • Skilled at finding vulnerabilities missed by conventional scanners
  • Ability to threat-model designs, white-box review code, and test running systems
  • Experience with SAST, DAST, software composition analysis, container scanning, secrets scanning, or cloud posture tooling
  • Ability to use coding agents and LLMs to accelerate work
  • Ability to separate severity from priority
  • Ability to collaborate with product engineers, SREs, and auditors
  • Self-directed in a remote environment

Nice to have

  • Strong Python or TypeScript experience
  • Fluency across both backend and frontend systems

Benefits

  • Competitive pay plus an organization-wide goal-based bonus
  • ~5 weeks of PTO to start
  • 1-week all-company Winter Holiday Break
  • Paid US holidays
  • 2 extra days of PTO for every year with Close
  • 80% Work Option: choose between a standard 5-day week or a 4-day week at 80% pay
  • Paid leave for primary and secondary caregivers
  • 1-month paid sabbatical every 5 years
  • Best-in-class health coverage with majority of premiums covered
  • Two medical plans, plus Dental, Vision, HSA, FSA, and company-paid Long-Term Disability
  • 401k match up to 6%, vested immediately

Before you apply

  • USA Only
  • Applications that read as fully AI-generated will not be considered

About the company

Close is a bootstrapped and profitable company that builds a communication-first, AI-powered CRM. They have a 130-person, 100% remote team.