Senior Security Engineer, Product Security

Job Overview

About GoodLeap: GoodLeap is a technology company delivering best-in-class financing and software products for sustainable solutions, from solar panels and batteries to energy-efficient HVAC, heat pumps, roofing, windows, and more.

Over 1 million homeowners have benefited from our simple, fast, and frictionless technology that makes the adoption of these products more affordable, accessible, and easier to understand.

Job Description

Thousands of professionals deploying home efficiency and solar solutions rely on GoodLeap’s proprietary, AI-powered applications and developer tools to drive more transparent customer communication, deeper business intelligence, and streamlined payment and operations.

Our platform has led to more than $30 billion in financing for sustainable solutions since 2018.

GoodLeap is also proud to support our award-winning nonprofit, GivePower, which is building and deploying life-saving water and clean electricity systems, changing the lives of more than 1. 6 million people across Africa, Asia, and South America.

Position Overview GoodLeap’s security team safeguards the organization’s information assets while enabling the business - spanning product safety and resilience, security paved roads, customer and regulatory trust, and technology governance.

You’ll be the primary security partner for one or more business units - GRC, security operations, and monitoring carry their own parts of the mandate, but you own the product security outcome. GoodLeap builds in TypeScript, Node. js, .

NET, and Python, and you’ll work across all of it - we care that you can move between stacks, not that you’ve spent your career in one.

Key Responsibilities

• About GoodLeap: GoodLeap is a technology company delivering best-in-class financing and software products for sustainable solutions, from solar panels and batteries to energy-efficient HVAC, heat pumps, roofing, windows, and more.
• GoodLeap is also proud to support our award-winning nonprofit, GivePower, which is building and deploying life-saving water and clean electricity systems, changing the lives of more than 1.6 million people across Africa, Asia, and South America.
• As a Senior Product Security Engineer, you’ll partner with product and engineering teams to make what we ship safe by default, splitting your time between building production security services and reviewing what other teams build: designs before code exists, pull requests before merge, and running systems before someone else finds the problem.
• GoodLeap builds in TypeScript, Node.js, .NET, and Python, and you’ll work across all of it - we care that you can move between stacks, not that you’ve spent your career in one.
• Essential Job Duties and Responsibilities Adversarially test our AI and LLM-backed features.
• Build and operate production security services.
• Backend services and internal tooling - APIs, streaming transports, proxy/CLI/chat interfaces - in whichever of TypeScript, Node.js, .NET, or Python fits the problem, held to the same bar as any other production service: test coverage, CI, dependency management.
• Support the red team’s bug bounty and continuous penetration testing programs.

Required Skills and Qualifications

• You don’t need years of AI security experience - you need to show you can take an unfamiliar system, reason about how it fails, and produce findings a product team will act on.
• Run structured bake-offs of security products against defined requirements and help set the standards AI/agent systems must satisfy before reaching production.
• Required Skills, Knowledge, and Abilities You ship production code.
• Prior product or engineering management experience is a plus, not an expectation.
• This is meant to describe the general nature and level of work being performed; it is not intended to be construed as an exhaustive list of all responsibilities, duties and other skills required for the position.
• The Company shall provide reasonable accommodations of known disabilities to enable a qualified applicant or employee to apply for employment, perform the essential functions of the job, or enjoy the benefits and privileges of employment as required by the law.

Benefits and Perks

• Over 1 million homeowners have benefited from our simple, fast, and frictionless technology that makes the adoption of these products more affordable, accessible, and easier to understand.
• Preferred: Having owned an AppSec tooling estate: SAST/SCA tuning, finding routing, false-positive reduction Running structured vendor evaluations or proofs of concept Contributing to security policy or standards, including for AI systems Delivering security training or building hands-on learning environments Depth in cryptography and key management Detection engineering, incident response, or threat hunting exposure An understanding of how SaaS products get built - roadmaps, prioritization, why the ship date exists.
• Compensation In addition to the above salary, this role may be eligible for a bonus.
• The Company shall provide reasonable accommodations of known disabilities to enable a qualified applicant or employee to apply for employment, perform the essential functions of the job, or enjoy the benefits and privileges of employment as required by the law.

Work Location and Schedule

This role is listed as Remote USA with location information shown as Remote USA. The employment type is Full Time.

About the Company

Goodleap is the organization connected with this listing. USA Jobs Today displays this opportunity for job discovery only, so applicants should verify company details, application instructions, and eligibility on the official employer website.