Senior Security Engineer, Product Security at Komodo Health · LumiJobs

Responsibilities

The Security team protects Komodo Health's data, platform and people. We run application and cloud security, vulnerability management, detection and response, and our SOC 2 program. We partner with engineering teams so the secure path is also the fastest one. This role sits in Security, works day to day with Product Security, and supports both our Engineering teams and our Forward Deployed Engineering (FDE) team.
This role gives Product Security deep engineering capacity for two groups: the Engineering teams that build our products, and the FDE team that deploys them into customer cloud environments. You will own the security of how Komodo builds, ships and deploys software: GitHub, CI/CD pipelines, SAST, SCA and DAST, and the AI features and coding agents our teams now ship with. Success means accurate findings reach engineers early, remediation scales through automation and secure defaults instead of tickets, AI features launch with guardrails designed in, and product-security metrics show measurable risk reduction.
You join while Komodo is putting LLM features into its products and AI agents into its engineering workflow, so you will help set the patterns everyone else follows. You will write code as much as you review it, and your work will show up in every repository and every release.
Looking back on your first 12 months at Komodo Health, you will have...
Established a trusted, scalable security-testing path across Komodo’s products and repositories, enabling engineers to identify and address security issues earlier.
Strengthened Komodo’s software supply chain and delivery practices through secure defaults, appropriate access controls, and resilient deployment patterns.
Established practical security patterns and guardrails for AI-enabled products and AI-assisted engineering workflows.
Reduced confirmed, exploitable risk across our products, prioritized by reachability, exposure and impact rather than raw CVE counts, and tracked with product-security metrics such as time to remediate confirmed findings and repeat-finding rates. Help define and improve the vulnerability-intake operating model, including appropriate handling of urgent findings.
Used AI and automation to speed up triage and remediation, with defined human review gates for decisions that carry risk.
Own the application security toolchain (SAST, SCA, container and secret scanning, DAST): configuration, custom rules, and a false-positive rate engineers can live with.
Build security automation in Python or TypeScript and GitHub Actions: policy-as-code checks, auto-triage and fix pull requests.
Run threat models and design reviews for new services and AI features, and review high-risk pull requests.

Senior Security Engineer, Product Security

Responsibilities

Benefits

Company

Komodo Health

More roles at Komodo Health