Senior Product Security Engineer

Join AlphaSense as a Senior Product Security Engineer, where you'll lead the design and implementation of secure, scalable, and trustworthy products across our AI-native platform. You'll work closely with architects, engineering, and product teams to embed security by design throughout the software development lifecycle. This role requires expertise in cloud security, AI/ML security, and secure architecture design. You'll also have the opportunity to mentor teams and promote a security-first culture.

• Lead the design and implementation of secure, scalable, and trustworthy products across AlphaSense's AI-native platform, embedding security by design throughout the software development lifecycle.
• Architect and enforce security controls for AI/ML systems, identifying and mitigating AI-specific attack vectors, and implementing model provenance, integrity, and auditability controls.
• Drive cross-functional security initiatives, partnering with engineering, product, and compliance to embed security into roadmaps, influence architectural decisions, and align stakeholders across boundaries.

• 5–7+ years in product, application, or cloud security engineering
• Proven expertise with cloud security concepts and best practices across multi-cloud environments
• Experience securing AI/ML pipelines, data workflows, and model-serving infrastructure, with working knowledge of AI/LLM security (prompt injection, model integrity, provenance)
• Demonstrated ability to drive cross-functional security initiatives — partnering with engineering, product, and compliance to embed security into roadmaps, influence architectural decisions, and align stakeholders across boundaries
• Understanding of authentication and authorization patterns in modern applications: OAuth 2.0, OIDC, SAML, RBAC, and ABAC
• Deep understanding of secure SDLC, threat modeling, and secure architecture design
• Ability to read and review code to inform threat models and design reviews
• Familiarity with encryption fundamentals — symmetric and asymmetric cryptography, TLS/mTLS, key management, and secrets handling
• Familiarity with DevSecOps and CI/CD environments
• Proficiency in Python, Java, and/or JavaScript for security automation and tooling
• Container and orchestration security (Kubernetes runtime protection)
• Software supply chain security and artifact integrity verification
• Experience with bug bounty programs — triaging findings, driving root-cause analysis, and turning results into systemic security improvements
• Familiarity with compliance and governance frameworks (SOC 2, ISO 27001, NIST 800-53, NIST AI RMF)
• Certifications such as CKS, CISSP, CSSLP, or AI/ML security credentials