Collective
Product Security Engineer
San Francisco
Sponsorship not specifiedDetected 5 days ago
PythonDjangoAWSCI/CDLLMsAgentic AICybersecurityAccountingBurp Suite
About the role
- You'll work closely with product engineers on a platform that handles our members' financial and tax data, where the cost of a missed vulnerability is real.
- Eliminate vulnerability classes at the root: ship secure defaults, paved-path libraries, and framework-level fixes so the easy way to write a feature is also the safe way - targeted, well-scoped code changes in the product codebase.
- Tune and evolve the program's signal quality: new rules, better prompts, fewer false positives - treating the agentic pipeline itself as a product you iterate on.
Responsibilities
- Build and operate an agentic application security program: the full testing stack - SAST, DAST, and software composition analysis (SCA) - integrated into CI/CD, LLM-based triage that separates real findings from noise, and automated security review of pull requests - so security feedback arrives in minutes, not review cycles.
- Drive vulnerability remediation end to end: triage and rate findings from scanners, penetration tests, and researchers
- Lead threat modeling and security review for new features and platform changes, engaging with product engineers early in design rather than at the end - and automate the practice over time, so threat models are living documents that agents draft and update as the system changes rather than point-in-time artifacts.
- Building large systems from scratch is not the center of this role
Requirements
- Hands-on experience with SAST, DAST, and SCA tooling and CI/CD integration - Semgrep, CodeQL, Bandit, OWASP ZAP, Burp Suite, or equivalent - including the judgment to know which findings matter.
Compensation
- Team Connection: Quarterly virtual events and an annual in-person summit.
Benefits
- Commuter Support: $150 monthly reimbursement for transit expenses.
- Health & Wellness: $200 quarterly reimbursement to support your well-being.
- Time Off: Flexible PTO plus 14 company holidays.
- Comprehensive Coverage: 100% medical, dental, and vision for employees
- 75% coverage for dependents.
- Parental Leave: 16 weeks fully paid.
- Retirement & Ownership: 401k plan plus an equity package.
Company info
- Collective is on a mission to redefine the way businesses-of-one work.
- Our technology and team of trusted advisors help members achieve financial independence by taking care of everything from business incorporation to accounting, bookkeeping, tax services, and access to a thriving community, all in one integrated platform.
- We believe in empowering self-employed people to enjoy the same tax savings that big companies get, so they can focus on their passion, not paperwork.
- Featured in Forbes, Business Insider, Yahoo, Bloomberg, Financial Times, TechCrunch, and more.
- We are backed by General Catalyst, Sound Ventures (Ashton Kutcher and Guy Oseary), QED Investors, Google's Gradient Ventures, Expa, and other investors who have financed iconic companies like YouTube, Substack, Twitch, Box, Hims, Instacart, and Lyft.
Apply directly at Collective →Create a free account for alerts like thisView Collective immigration profile
This listing is sourced directly from Collective's careers page and normalized into a canonical job model.