SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Blockchain.com is seeking a Senior Product Security Engineer to operate and lead the Product Security program across its Consumer, OTC, and MRE product lines. This is a hands-on senior role combining strategic security partnership with engineering teams and deep technical execution.
Key responsibilities include designing and operating the secure development lifecycle (SDLC), leading threat modeling and architecture reviews for sensitive flows (authentication, payments, custody), and owning the security debt lifecycle. You will architect and maintain automated security pipelines protecting billions in transaction volume, including SAST/SCA/DAST orchestration, CI/CD security automation, and vulnerability triage workflows.
You'll conduct deep-dive manual code reviews of security-critical Java, Kotlin, TypeScript, and Python code; lead the bug bounty program's technical triage and remediation strategy; and translate technical risks into clear security policies and Application Security Standards. Additional responsibilities include researching and embedding AI/LLM utilities into the SDLC, defining runtime detection signals and telemetry, building test harnesses and fuzzing frameworks, and supporting incident response for payment and settlement incidents.
You will mentor junior product security engineers and security champions, define product security metrics (MTTR, security debt burn-down, defect density), and produce data-driven risk reports for leadership. The role requires strong stakeholder management to negotiate remediation timelines with product and engineering leadership, backed by risk-based prioritization.
Required: 4+ years security engineering experience with 3+ years in application/product security; expertise in web, mobile, cloud, and infrastructure pentesting; proven track record shipping security automation (CodeQL/GHAS, Snyk, SARIF); expert-level code audit skills across Kotlin/Java/TypeScript/Python; strong threat modeling and architecture guidance for financial flows; experience building CI checks and lightweight fuzzing/property tests; excellent stakeholder negotiation skills.
