Note: The job is a remote job and is open to candidates in USA. Forescout Technologies Inc. builds cybersecurity defenses that protect critical infrastructure and connected organizations from cyber threats. The AI Product Security Engineer will design, build, and scale AI-enabled product security capabilities, including vulnerability management, security automation, and secure-by-design practices. The role partners across engineering, cloud, compliance, and security teams to embed security into the software development lifecycle and support regulatory requirements.
Responsibilities
- Partner with Architects to define secure architecture patterns for Development, and Operate Product Security systems
- Build AI-driven solutions into CI/CD to accelerate
- Vulnerability discovery
- Triage and prioritization
- Root cause analysis
- Remediation recommendations
- Validation testing
- Penetration testing
- Security documentation
- Develop exploitability-aware prioritization models using business context, reachability, threat intelligence, and customer impact
- Reduce false positives and improve signal-to-noise ratios across Development tooling
- Implement automated workflows for CVE, KEV, SBOM, SAST, DAST, Dependency Management, EoL and SCA findings
- Conduct threat modeling, design reviews, security assessments, and architecture reviews
- Partner with development teams to identify and remediate security weaknesses
- Participate in vulnerability response and incident response activities
- Work with engineering teams to reduce critical vulnerability exposure and accelerate remediation timelines
- Develop dashboards and metrics that measure risk reduction, security maturity, and remediation performance
- Ensure security controls remain updated and align with customer, certification, and government requirements, ex
Skills
- 5+ years of experience in: + Product Security + Application Security + Cloud Security + DevSecOps + Security Engineering
- Demonstrated experience securing enterprise-scale software products and cloud services
- Experience integrating security into modern SDLC pipelines
- Threat modeling
- Secure design reviews
- Vulnerability assessment
- Penetration testing
- Secure coding practices
- Incident response
- Software supply chain security
- Penetration Testing
- Experience with several of the following:
- Snyk
- Wiz
- Burp Suite
- Tenable
- GitHub Advanced Security
- Claude Security
- OpenAI SCT
- Open Source AI tooling / harnesses
- Veracode
- Semgrep
- SonarQube
- Azure
- AWS
- Kubernetes
- Containers
- Infrastructure-as-Code (Terraform)
- Identity and access management
- API security
- Strong proficiency in one or more:
- Python
- Java
- Go
- C/C++
- JavaScript/TypeScript
- Hands-on experience using AI/LLM technologies in engineering or security workflows
- Understanding of: + Prompt injection attacks + RAG security risks + AI model abuse + Data poisoning + Tool misuse + Agent security + AI governance controls
- Experience building or integrating AI-assisted automation solutions
- Familiarity with AI coding agents, copilots, and autonomous security workflows
- CISSP, CSSLP, OSCP, GIAC, or equivalent certification
- Experience with AI red teaming and adversarial testing
- Experience building developer security platforms
- Experience securing SaaS products, APIs, and distributed systems
- Familiarity with enterprise-scale software delivery organizations
- Experience supporting FedRAMP or government cloud environments
Benefits
- Coverage of 85% of employee and dependent health care premiums
- 100% company-paid employee life and disability insurance premiums
- 401(k) match
- Generous flexible time off for U.S. employees
- Voluntary life, accident, and critical illness insurance options
- Employee assistance program
- Maternity and parental bonding leave
- Leadership teams actively supporting development, career progression, and opportunities for employees to do their best work
Company Overview
Company H1B Sponsorship