Security Engineer - Product Security (Senior)
About CogentCogent is an Applied AI Lab building the next generation of AI agents for cybersecurity. AI has fundamentally changed how attacks happen, allowing malicious actors to operate at unprecedented speed and scale. Cogent’s "AI Taskforce" assesses petabytes of enterprise data to remediate these issues before critical breaches occur.To stay at the cutting edge, we blend frontier research with real-world execution. Alongside our core product work, Cogent Research serves as our applied AI lab, providing the research horsepower needed to make truly agentic security workflows a reality.Since coming out of stealth, Cogent has experienced rapid growth. We partner with Fortune 500 companies to secure some of the most complex production environments in the world.We’re backed by Greylock and we’ve built a team with the best minds in applied AI. Our team is comprised of people from:Top universities like Stanford, Berkeley, Penn, Duke, Carnegie Mellon, WaterlooPreeminent research labs like Deepmind and SAILUnicorn, high-growth companies like Scale AI, Databricks, Stripe, Tesla, CoinbaseWorld class cybersecurity experts from Wiz, Abnormal AI, ZscalerAbout The RoleWe're hiring a Senior Security Engineer, Product Security to own the security of the software we build. You'll partner closely with engineering to embed security into the Software Development Lifecycle (SDLC), keep our dependencies and supply chain safe, and make sure the product our customers trust is built on a secure foundation. You’ll also have the chance to influence our product, as an internal SME and early security user, your feedback loop directly shapes what we ship.What You’ll DoEmbed security into the software development lifecycle: threat modeling, secure design reviews, and secure-coding guidance that engineers actually adoptOwn application security testing - code review, SAST/DAST, and triage - and drive issues to remediation rather than just filing themHarden our software supply chain: dependency verification, safe dependency management, and CI/CD pipeline securityBuild and automate security tooling and guardrails so security scales with engineering, not against itServe as the internal security SME on product and workflow decisions, and as an early user of what we buildPartner across all teams on architecture and design so security is a default, not an afterthoughtWhat We're Looking For5+ years of extensive security engineering experience within product / application security, upholding the highest Trust standardsStrong hands-on engineer who ships - you produce and automate, you don't just manage processStrong software engineering skills; comfortable working in code across the stack (e.g. Python, Go, Typescript, and/or similar)Depth in application/product security: secure SDLC, threat modeling, code scanning, and supply-chain / dependency securityFluency with the modern AI landscape and how it’s influencing the security picture - staying up to date with the rapidly changing environmentAble to flex up and down: strategic when it matters, in the weeds when it countsComfortable being an early security hire at a startup - high ownership, ambiguity, and direct impact Bonus PointsExperience securing AI/ML products or agentic systemsBackground contributing to developer-enablement or security-champions programsPrior experience as an early security hire or building an AppSec function from scratchFor California Based ApplicantsThe standard base salary range for this position is $100,000 - $300,000 annually. Compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation, equity, and benefits.We are committed to building an inclusive and diverse company. We do not discriminate based on gender, ethnicity, sexual orientation, religion, civil or family status, age, disability, or race.