[Hiring] Senior Product Security Engineer @Close

Role Description

Close is a CRM built around the communication tools sales teams use every day: email, calling, SMS, workflows, reporting, and AI. Underneath that product is a broad technical surface:

• Python services and a large application backend
• TypeScript and React frontend
• Public APIs, Docker and Kubernetes, AWS infrastructure
• Integrations with providers that handle sensitive customer data

We’re hiring our first dedicated Product Security Engineer to make that work systematic. You’ll report to the Backend Platform team manager within EPD (Engineering, Product, and Design), while working across the entire product and infrastructure surface. Your responsibilities include:

• Finding vulnerabilities and determining which findings matter most
• Driving vulnerabilities through remediation
• Analyzing code, building proof-of-concepts, and testing running applications
• Tuning or replacing noisy tools and automating parts of vulnerability management
• Partnering closely with Infrastructure team on cloud security, access, and secrets
• Collaborating with Security & Trust Lead on compliance goals, audits, and corporate security

This role is new at Close, providing significant room to decide where better tooling, clearer ownership, and a small amount of code can reduce the most risk.

Qualifications

• An application security engineer who writes code
• Strong Python or TypeScript experience
• Fluency across both backend and frontend systems
• Skilled at finding vulnerabilities conventional scanners may miss
• Experience with modern AI-assisted review pipelines
• Offensive-minded and operationally responsible
• An automation builder with experience in SAST, DAST, and cloud posture tooling
• AI-native and accountable
• Able to separate severity from priority
• Comfortable working across the business
• Self-directed in a remote environment

Requirements

• Build a recurring product security review program
• Improve application security testing
• Own vulnerability intake and remediation
• Turn security alerts into useful engineering work
• Make dependency remediation safer and less manual
• Make secrets routinely rotatable
• Strengthen AWS security with Infrastructure
• Support audits and raise the security floor
• Take a key technical role in security incident response

Benefits

• Compensation: Competitive pay plus an organization-wide goal-based bonus
• Paid Time Off: ~5 weeks of PTO to start, plus a 1-week all-company Winter Holiday Break and paid US holidays
• 80% Work Option: Choose between a standard 5-day week or a 4-day week at 80% pay
• Parental Leave: Paid leave for primary and secondary caregivers
• Sabbatical: A 1-month paid sabbatical every 5 years
• Healthcare (US residents): Two medical plans with Close covering 99% of your premium, plus Dental, Vision, HSA, FSA, and company-paid Long-Term Disability
• 401k (US residents): We match your contributions up to 6%, vested immediately