Senior Security Engineer, Product Security

A senior product security engineer at Komodo Health, working remotely in the US, who owns the security of how its engineering and forward deployed teams build, ship and deploy software as the company adds LLM features and coding agents. The engineer runs the SAST, SCA, container, secret and DAST tooling with custom rules, builds automation in Python or TypeScript and GitHub Actions, threat models new services and AI features, reviews risky pull requests, scopes pentests and checks fixes, coaches engineers on secure LLM, MCP, RAG and agent patterns, and keeps SDLC controls ready for SOC 2.

It asks for six years in software or security engineering, three in application or product security, deep GitHub Actions and pipeline-attack knowledge, web and API pentesting, LLM security and cloud experience.