Senior Product Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Product Security Engineer based in Canada

This role leads product security across an AI-native technology environment, with a strong focus on building secure, scalable, and trustworthy products. You’ll work closely with architecture, engineering, product, and compliance teams to embed security throughout the software development lifecycle. The position combines AI/ML security, secure architecture, threat modeling, automation, and customer-facing security assurance. You’ll help address emerging AI-specific risks while establishing practical security standards and governance frameworks.

The role also offers the opportunity to influence architectural decisions, strengthen security culture, and mentor engineering teams. It is well suited to a senior security professional who enjoys solving complex problems at the intersection of product development, cloud, and AI.

• Architect and implement security controls for AI/ML systems, including model training, data pipelines, inference environments, and agentic workflows.
• Identify and mitigate AI-specific threats such as prompt injection, data poisoning, model inversion, and model theft.
• Establish controls for model provenance, integrity, auditability, and responsible AI security practices.
• Align AI security initiatives with governance and compliance frameworks such as NIST AI RMF and the EU AI Act.
• Embed security, privacy, and compliance requirements into application, cloud, software, and AI development life cycles.
• Define and maintain secure development standards, architectural guidance, and security best practices.
• Lead threat modeling, secure design reviews, and risk assessments across the software development lifecycle.
• Build security automation and governance capabilities that integrate naturally into engineering workflows.
• Prepare customer-facing security assurance materials, including questionnaire responses, security whitepapers, and trust documentation.
• Represent product security in customer, leadership, and cross-functional discussions, helping communicate security requirements and risk decisions.
• Mentor engineering teams on secure coding, AI risk management, threat modeling, and secure design.
• Promote a security-first culture through documentation, training, advocacy, and continuous improvement.

• 5–7+ years of experience in product, application, or cloud security engineering.
• Strong knowledge of secure SDLC practices, threat modeling, and secure architecture design.
• Ability to read and review code to support security assessments, threat models, and architectural reviews.
• Experience securing AI/ML pipelines, data workflows, and model-serving infrastructure, with practical knowledge of LLM and AI security risks such as prompt injection, model integrity, and provenance.
• Strong understanding of cloud security principles and best practices across multi-cloud environments.
• Familiarity with Dev Sec Ops  practices and CI/CD environments.
• Knowledge of encryption fundamentals, including symmetric and asymmetric cryptography, TLS/mTLS, key management, and secrets handling.
• Understanding of modern authentication and authorization patterns, including OAuth 2.0, OIDC, SAML, RBAC, and ABAC.
• Demonstrated ability to lead cross-functional security initiatives and collaborate with engineering, product, and compliance teams.
• Strong communication, stakeholder management, analytical thinking, and influencing skills.
• Experience with Python, Java, and/or JavaScript for security automation and tooling is an advantage.
• Experience with Kubernetes and container security, software supply chain security, artifact integrity, or…