Note: The job is a remote job and is open to candidates in USA. Colossus Technologies Group is partnering with a rapidly growing technology company operating at the intersection of financial services and emerging technology to expand its Product Security organization. The role focuses on building security into products through secure architecture, technical security assessments, security tooling, vulnerability automation, and collaboration with engineering teams.
Responsibilities
- Threat modeling and security architecture reviews for new products and services
- Hands-on code review, vulnerability research and application penetration testing
- Building internal security tooling and automation in Python, Go or similar languages
- Developing automated approaches to vulnerability discovery and remediation
- Improving SAST, DAST and software supply-chain security
- Security controls and tooling integrated directly into CI/CD and the SDLC
- Applying AI/agentic systems to security engineering, code analysis and security automation
- Partnering directly with engineering teams to develop secure-by-default patterns
Skills
- • 5+ years of hands-on application, product or software security experience
- • Strong software engineering or scripting ability
- • Experience building security tooling rather than exclusively operating commercial products
- • Strong understanding of modern web applications, APIs and cloud-native architectures
- • Experience with threat modeling, secure code review and offensive application testing
- • Ability to work directly with senior software engineers on complex technical problems
- Remote – United States
- • AI/LLM or agent security
- • Building AI-assisted security tooling
- • Software supply-chain security
- • AWS and Kubernetes
- • Fintech, payments, crypto or another highly regulated environment
Benefits
- Bonus
- Equity
- Remote – United States
Company Overview