Goodleap
Senior Security Engineer, Product Security
Remote, US · Senior
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- About GoodLeap: GoodLeap is a technology company delivering best-in-class financing and software products for sustainable solutions, from solar panels and batteries to energy-efficient HVAC, heat pumps, roofing, windows, and more.
- Over 1 million homeowners have benefited from our simple, fast, and frictionless technology that makes the adoption of these products more affordable, accessible, and easier to understand.
- You don't need years of AI security experience - you need to show you can take an unfamiliar system, reason about how it fails, and produce findings a product team will act on.
Requirements
- it is not intended to be construed as an exhaustive list of all responsibilities, duties and other skills required for the position.
- If you are an extraordinary professional who thrives in a collaborative work culture and values a rewarding career, then we want to work with you!
Nice to have
- Adversarially test our AI and LLM-backed features.
- Backend services and internal tooling - APIs, streaming transports, proxy/CLI/chat interfaces - in whichever of TypeScript, Node.js,.NET, or
- Find new ways to automate the work.
- Notice when something we do by hand has become automatable, prototype it, and make the case- even when it means replacing a tool we bought last year.
- Review pull request vulnerability findings.
- Triage what scanning and AI-assisted review surface across our stacks, separating real findings from noise.
- Go deep by hand on auth paths and high-risk changes, and feed what you learn back into the tooling.
- Manual testing of web applications and APIs, triage for real exploitability, and retest fixes.
Compensation
- $146k-$187k
Company info
- We are committed to protecting your privacy.
- The Company reserves the right at any time with or without notice to alter or change job responsibilities, reassign or transfer job position or assign additional job responsibilities, subject to applicable law.
Visa & Work Authorization
- Please note: This role is not eligible for visa sponsorship.
This listing is sourced directly from Goodleap's careers page and normalized into a canonical job model.