Staff Product Security Engineer - Customer Platform

Valon is building the AI-native operating system for regulated finance, starting with mortgage servicing. They are a Series C company backed by a16z, transforming industries with a focus on security and innovative software solutions in regulated industries.

Location: Remote

Salary: $190K - $260K

Responsibilities

• Define and evolve product security architecture and strategy for Valon’s multi-tenant SaaS platform
• Architect and guide secure implementation of customer-facing security capabilities in conjunction with Engineering (e.g., authentication / authorization models, identity integration, access controls, audit and logging, encryption / key management)
• Build and maintain security reference architectures and standardized secure design patterns for product teams
• Lead threat modeling, security design and code reviews for new features, services, and major architectural changes
• Collaborate with Product, Engineering, Data, Compliance, Legal, and other teams to identify and drive mitigation for product and data security risks
• Support vulnerability triage, remediation strategy, and root cause analysis for product security issues
• Support security compliance and regulatory needs (e.g., SOC 2, CCPA, NYDFS, FTC), including customer-facing security discussions and due diligence
• Develop, implement, and enforce security policies, standards, and procedures
• Support operational activities including security advisory and consultative reviews, incident response, issue remediation, and other security processes

Requirements

• Extensive experience in product security, application security, or security architecture roles, with ownership of security design for SaaS platforms including multi-tenancy and customer-facing security capabilities.
• Strong background in cloud security and modern infrastructure, with hands-on experience securing cloud environments (GCP preferred).
• Proven experience in SaaS IAM and tenant security (e.g., authentication/authorization, RBAC, SSO/SAML/OIDC, SCIM, MFA, audit logs).
• Expertise in designing secure platform controls (e.g., APIs, service-to-service auth, encryption/KMS/CMEK, logging/monitoring).
• Demonstrated ability to build and maintain security reference architectures.
• Expert-level experience leading threat modeling and security design reviews including security-focused code reviews.
• Applied knowledge with industry security and compliance frameworks (OWASP, NIST, CIS, SOC 2/ISO 27001 concepts).
• Highly hands-on engineer with proven ability to operate autonomously, drive multiple complex cross-functional efforts, and influence independently.
• Excellent communication and collaboration skills, including the ability to explain complex security concepts to both technical and non-technical stakeholders.
• Prior software engineering experience and/or coding ability (Python) is preferred.
• Experience working in high-growth or startup environments is a plus.

Benefits

• Base Compensation Band: $190K - $260K. Base salary offered is determined by a number of factors including the candidate’s experience, qualifications, and skills.
• Compensation: Competitive salary with a meaningful stake in the company via equity, and 401k plan.
• Health & well-being: Comprehensive medical, dental, & vision benefits.
• Commuter benefits: Pre-tax deductions for public transportation, rideshare services, and parking expenses.
• Grow together: Company-wide orientation, learning & development opportunities, regular review cycles with 360-degree feedback.
• Play together: Quarterly budgets for team and company outings.
• Generous time off: Flexible paid time off, sick days, and 11 company holidays.
• Baby bonding time: 12 weeks off for both birthing and non-birthing parents - fully paid.

Additional Information

• Throughout the interview process, emails will only be from valon.com email addresses. Valon will never ask for personally identifiable information during the interview.
• Valon is an equal opportunity employer committed to diversity and inclusion.