LaunchDarkly
Product Security Engineer
About this role
LaunchDarkly seeks a Product Security Engineer II to secure its critical infrastructure platform through threat modeling, cloud security posture management, and proactive security partnerships with engineering teams. You'll focus on turning security practices into repeatable systems while leveraging AI to reduce toil and increase coverage across the product security surface.
What you'll do
- Lead threat modeling engagements on high-risk features and services with clear prioritization criteria
- Triage and investigate CNAPP findings end-to-end, route to service owners, and identify systemic fixes
- Partner with product engineering teams as a trusted security reviewer, catching issues early and proposing solutions
- Contribute to SDLC tooling, SAST/SCA workflows, and bug bounty triage as needed
- Integrate AI tools to accelerate triage, threat modeling, code scanning, and reduce manual toil
- Build preventative security culture through documentation, office hours, and incremental improvements
What they're looking for
- Threat modeling and security architecture
- Cloud security posture management (CNAPP)
- SAST/SCA and SDLC security tooling
- Security fundamentals and program design
- Cross-functional collaboration and communication
- AI/LLM application to security workflows
- Incident prevention and proactive risk assessment
- Bug bounty triage and vulnerability prioritization
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
LaunchDarkly
LaunchDarkly builds a platform for feature management, AI configuration, and observability that helps teams control, monitor, and safely deploy software. The company is hiring Full Stack Engineers, SDK developers, and security specialists to expand its core platform capabilities, including AI-powered onboarding, release safety monitoring, enterprise integrations, and developer security tooling.
- Website
- launchdarkly.com
Likely interview questions
- Walk us through your experience leading threat modeling engagements—how do you determine scope and communicate findings to non-security teams?
- Describe your approach to CNAPP triage at scale. How would you distinguish between one-off issues and systemic problems requiring architectural changes?