Filigran - Staff AppSec / Product Security Engineer

• Leverage AI tools and methodologies to boost productivity and impact • Contribute to building AI capabilities into internal workflows • Advise the CISO on product security strategy across the XTM platform, and lead its operational implementation in the product teams: turn priorities into concrete actions, and track security technical pains to resolution. • Lead threat modeling and security reviews in feature refinements with Product Owners: authentication and RBAC, multi-tenancy, connectors, the GraphQL API, and AI and agent features. • Ensure the security quality of the stack through critical PRs, fixes and code reviews, and build shared, secure-by-default components (authorization, secrets, safe outbound calls, input handling). • Drive secure SDLC and supply chain tooling in CI (SAST, SCA, secret and container scanning, Renovate, Snyk, SBOMs, signed releases), tuned so teams trust the results. • Run product vulnerability management: intake from the open source community, researchers and bug bounty, coordinated disclosure, CVEs and advisories, remediation SLAs, and the product side of security incidents. • Mentor engineers and grow security champions through pairing, workshops and continuous feedback. Document security architecture decisions so they stay consistent across teams. • 🤝 Who You’ll Work With • Reports to: the CISO, as part of the Digital Security team. • Reports to: • Key collaborators: the R&D team, including Staff and Principal Engineers and Engineering Managers across the product teams, and Product Owners during refinements, Platform Engineering on infrastructure, compliance (SOC 2 Type 2, ISO 27001:2022, FedRamp) and incidents, and Customer Success on customer security questions and pentest findings. • Key collaborators: • Mentorship: no direct reports. You'll act as the security technical reference and mentor for engineers across all teams, and grow a network of security champions. • Mentorship: • 🧬 Profile We’re Looking For • Strong interest in AI and its applications in cybersecurity • Comfortable working with and leveraging AI-powered tools (LLMs, automation, copilots, etc.) to improve workflows and productivity • Master degreee in computer science and or cybersecurity with 8+ years of experience in software engineering and application or product security, including at least 3 years as the security technical reference for a SaaS or enterprise product • Comfortable working in a remote, async-first environment • Strong engineering and security skills: you write production code fluently in at least two of Python, Node.js, TypeScript, Java or Rust, and you know web and API security in depth (GraphQL, OIDC/SAML, RBAC, multi-tenant isolation, SSRF, injection), CI/CD security tooling, and container and Kubernetes security • A track record of influence without authority: you led a cross-team security initiative, coached engineers, and got standards adopted with pragmatism and clear priorities • Autonomy, ownership, and team spirit • Bonus: AI and LLM security (prompt injection, agent permissions), open source contributions or published CVEs, bug bounty program experience, knowledge of STIX 2.1 / MITRE ATT&CK or hands-on use of OpenCTI or OpenAEV • 🌱 Why Join Filigran? More than just a job. • Why Join Filigran? More than just a job. • We are a fast-growing, global and remote-first company, and we believe the best work combines purpose, impact and innovation. You’ll work alongside talented people across the world who care about what they build, how they build it, and the impact they make on the broader cybersecurity ecosystem. • fast-growing, global and remote-first company • purpose, impact and innovation • ⭐ Be part of something bigger • Be part of something bigger • We believe we do work that matters. Our open-source approach means that work extends beyond Filigran. You’re contributing to technology and ideas that strengthen a global community of defenders and help make cybersecurity more open and collaborative. • 💻 Work at the edge of what’s next • Work at the edge of what’s next • We bring together cybersecurity, open source and AI — giving you the opportunity to work with emerging technologies, experiment with new ways of working, and contribute to how they are applied in practice. • 🌍 Global opportunity without borders • Global opportunity without borders • Be part of a fast-growing, truly international team — collaborating across Europe, North America, APJ and beyond, with the flexibility of a remote-first environment. As we grow, you’ll have opportunities to expand your scope, take ownership, learn quickly and grow with us. • 🧭 A culture grounded in CORE • A culture grounded in CORE • Cohesion, Openness, Responsibility and Equity define how we work together — with openness, ownership, collaboration and respect. These are the principles that guide how we make decisions, treat people and grow together, especially when no one’s watching. • Cohesion, Openness, Responsibility and Equity • 💰 What you can expect • What you can expect • Competitive compensation + equity — everyone shares in our success