Senior Security Engineer - Product Security

Cogent Security is on a mission to stop breaches and prevent cybercrime by innovating at the frontier of generative AI systems. They are seeking a Senior Security Engineer, Product Security to own the security of the software built, partnering closely with engineering to embed security into the Software Development Lifecycle and ensuring a secure foundation for their products.

Responsibilities:

• Embed security into the software development lifecycle: threat modeling, secure design reviews, and secure-coding guidance that engineers actually adopt
• Own application security testing - code review, SAST/DAST, and triage - and drive issues to remediation rather than just filing them
• Harden our software supply chain: dependency verification, safe dependency management, and CI/CD pipeline security
• Build and automate security tooling and guardrails so security scales with engineering, not against it
• Serve as the internal security SME on product and workflow decisions, and as an early user of what we build
• Partner across all teams on architecture and design so security is a default, not an afterthought

Requirements:

• 5+ years of extensive security engineering experience within product / application security, upholding the highest Trust standards
• Strong hands-on engineer who ships - you produce and automate, you don't just manage process
• Strong software engineering skills; comfortable working in code across the stack (e.g. Python, Go, Typescript, and/or similar)
• Depth in application/product security: secure SDLC, threat modeling, code scanning, and supply-chain / dependency security
• Fluency with the modern AI landscape and how it's influencing the security picture - staying up to date with the rapidly changing environment
• Able to flex up and down: strategic when it matters, in the weeds when it counts
• Comfortable being an early security hire at a startup - high ownership, ambiguity, and direct impact
• Experience securing AI/ML products or agentic systems
• Background contributing to developer-enablement or security-champions programs
• Prior experience as an early security hire or building an AppSec function from scratch