sevenai
Boston, MA
AppSec
Posted 3 hours ago
At 7AI, security is foundational to everything we build. Our customers trust us with some of their most sensitive data, and our platform must earn that trust every day.
We are seeking a Senior Product Security Engineer to join our Platform team. In this role, you will help shape how security is built into our products, platforms, and engineering workflows from day one. Rather than acting as a gatekeeper, you will partner directly with engineers, product teams, and platform teams to build secure-by-default systems that allow the organization to move faster with confidence.
As AI-generated code becomes a core part of how software is developed across the company, you will help define the guardrails, tooling, and architecture patterns that enable engineers, product managers, and other builders to safely leverage AI while maintaining a strong security posture. You will work hands-on in code, contribute to platform capabilities, and help establish security practices that scale as the company and product portfolio grow.
This is a hands-on role for an engineer who enjoys influencing architecture, building developer-facing systems, and solving security challenges through engineering rather than process.
Responsibilities:
Define and evolve secure architecture patterns for products, services, internal tools, and platform capabilities across 7AI.
Partner directly with engineering teams throughout the software development lifecycle, helping design, implement, and ship secure systems.
Build or help build security guardrails, automation, and platform capabilities that enable developers to move quickly while operating within secure boundaries.
Operate and continuously improve our SAST, SCA, CSPM and other Prodsec tooling
Design and implement approaches for safely leveraging AI-generated code, agentic workflows, and AI-powered developer tooling.
Collaborate with Platform and DevOps engineers to integrate security controls directly into developer workflows, CI/CD pipelines, infrastructure, and deployment systems.
Identify security risks through architecture reviews, threat modeling, code review, and hands-on investigation, then work alongside engineers to remediate them.
Contribute code, prototypes, tooling, and platform services that improve security across the engineering organization.
Help define security standards, engineering practices, and development workflows that can scale with the company as we grow.
Serve as a trusted technical partner to engineering teams, helping balance security, usability, and delivery velocity.
Participate in customer and partner security discussions when deep technical expertise is needed.
Requirements:
6+ years of software engineering, security engineering, or product security experience in modern cloud-native environments.
Strong understanding of secure application and system design, including authentication, authorization, secrets management, software supply chain security, and common application vulnerabilities.
Comfortable reading, reviewing, and contributing production code in at least two of Python, TypeScript, or Rust.
Experience implementing and tuning SAST, SCA, dependency management, CSPM, and other security tooling.
Experience designing security controls and secure development workflows that integrate directly into engineering processes.
Hands-on experience building developer tooling, platform services, automation, or infrastructure that improves security outcomes.
Strong threat modeling and architectural reasoning skills, with the ability to translate security concerns into practical engineering solutions.
Ability to work collaboratively with product, platform, and engineering teams and influence decisions through technical credibility.
Excellent written and verbal communication skills.
Ability to balance security rigor with engineering velocity in a fast-moving product environment.
Nice to Have:
Experience securing AI platforms, LLM-powered applications, agentic systems, or AI-assisted software development workflows.
Experience building internal developer platforms, engineering enablement systems, or platform engineering capabilities.
Familiarity with AWS, GCP, or Azure cloud environments.
Experience contributing to security tooling, open-source projects, developer infrastructure, or platform services.
Experience in high-growth startups where pragmatism, ownership, and execution matter more than organizational boundaries.
Hiring for a role like this?
Reach cybersecurity professionals browsing the board — your listing goes live instantly.
Stay ahead of the curve. Get new infosec jobs in your inbox: