Product Security Engineer

Job Description

Alpaca, a US California headquartered brokerage infrastructure technology company, is seeking a Product Security Engineer to enhance its security efforts. The Product Security Engineer will play a crucial role in safeguarding Alpaca’s assets from evolving cyber threats and ensuring the security and integrity of its products. This role involves collaborating with engineering, product, and operations teams to embed security best practices into the development lifecycle, harden systems, and respond to emerging threats. The Security Team is 100% distributed and remote, reporting directly to the CISO.

Role involves:

• Collaborating with Product, Engineering, and DevOps to embed security into the API and platform development lifecycle.
• Performing threat modeling and security reviews to spot risks early.
• Identifying, triaging, and remediating security vulnerabilities.
• Building and tweaking automation tools for security testing and monitoring.
• Participating in security incident response efforts.
• Hardening cloud systems (Google Cloud, Kubernetes) and products.
• Promoting a security-first mindset through guidance and training.
• Assisting with compliance audits and assessments.
• Conducting security research and contributing to the development of new security tools and techniques.

Requirements:

• Excitement about Alpaca’s mission.
• 6-8 years of experience in security operations, security engineering, product security, and DevSecOps.
• Proficiency in at least one programming language (e.g., Go, Python etc.).
• Experience with API security (e.g., OAuth, JWT, WAF, rate limiting).
• Experience with cloud security (e.g., Google Cloud, AWS) including DevSecOps.
• Understanding of how to secure containerized environments (e.g., Kubernetes, Docker).
• Familiarity with security tools such as static code analyzers, vulnerability scanners, and penetration testing frameworks.
• Knowledge of common security vulnerabilities (e.g., OWASP Top 10) and mitigation strategies.
• Strong analytical and problem-solving skills.
• Excellent communication skills and commitment to collaborative work.
• Comfortable thriving in a distributed, remote-first team.
• A curious mindset, empathy, and a commitment to accountability.
• Availability for on-call rotations and after-hour responses as needed.

Alpaca offers:

• Competitive Salary & Stock Options
• Health Benefits
• New Hire Home-Office Setup: One-time USD $500
• Monthly Stipend: USD $150 per month via a Brex Card