Latest AI JobsBrowse Jobs
Rogo logo

Security Engineer, Product

RogoNew York CitySecurity
Apply on company site
Salary
$270K - $330K USD
Job type
Full-time
Posted
7 Oct 2025
Status
Open · checked 7d ago

About this role

Rogo is seeking a full-time Product Security Engineer to join the team in New York City and drive offensive security testing and platform hardening. This role suits a hands-on security practitioner who thrives in a fast-paced startup environment and wants to secure cutting-edge AI systems for the financial sector.

Role Overview

As a Security Engineer at Rogo, the focus is on offensive security, breaking products before adversaries do, and embedding continuous security validation into engineering workflows. This position serves as the primary offensive security capability, finding, exploiting, and eliminating vulnerabilities across products, APIs, and cloud infrastructure. Rather than relying solely on manual reviews or external audits, this role builds intelligent security automation and agentic tooling to scale testing and patch vulnerabilities end-to-end.

Key Responsibilities

Conduct continuous, hands-on penetration testing and red team assessments against applications, APIs, AI and machine learning pipelines, and cloud environments.
Build agentic security tooling that autonomously discovers, validates, and patches vulnerabilities to minimize manual intervention across code review, dependency management, and infrastructure as code.
Develop and maintain custom offensive tooling, exploit chains, and attack simulations tailored to the platform architecture.
Perform deep adversarial testing of AI-specific attack surfaces, including prompt injection, model manipulation, data poisoning vectors, agent-based workflows, and tenant isolation boundaries.
Execute threat modeling sessions with engineering teams and translate offensive findings into concrete, prioritized remediation within the same sprint.
Contribute directly to backend codebases to fix critical vulnerabilities, harden authentication and authorization flows, and build security primitives into the platform.
Lead purple team exercises to test detection and response capabilities against realistic offensive scenarios.
Own relationships with external penetration testing firms and drive the remediation of identified findings to full closure.

Requirements

Professional penetration testing experience across web applications, APIs, cloud environments, and ideally AI and machine learning systems.
Experience building or a strong desire to build agentic security tooling that autonomously finds, validates, and patches vulnerabilities.
Professional development experience in a strongly typed programming language such as Rust, Go, Java, or C++, alongside scripting languages like Python or Bash for exploit development and tooling.
Familiarity with tools such as Burp Suite, Nuclei, Semgrep, and custom fuzzing frameworks.
Experience integrating automated security checks into CI/CD pipelines while maintaining engineering velocity.
Comfort with infrastructure automation tools like Terraform and Kubernetes, with the ability to identify misconfigurations and attack paths in AWS or GCP environments.
Strong communication skills to collaborate effectively with developers, product teams, and leadership.
Applied knowledge of threat modeling, cryptography fundamentals, and compliance frameworks such as SOC 2, ISO 27001, ISO 42001, and NIST CSF.

Nice to Have

Professional offensive security certifications including OSCP, OSWE, GXPN, GWAPT, CPTS, or similar credentials.
Experience testing multi-tenant SaaS platforms serving regulated industries, particularly financial services.
Hands-on cloud penetration testing experience in AWS or GCP involving privilege escalation, cross-account attacks, or metadata abuse.
Kubernetes security testing experience covering RBAC abuse, container escapes, admission controller bypasses, or network policy evasion.
A proven bug bounty track record, published CVEs, or formal security research.
Experience leading customer-facing security conversations, technical debrief calls, and security architecture reviews.

Skills and Tools

Python
AWS
GCP
Kubernetes
Java
Rust
C++
Terraform

Salary and Benefits

Annual Salary: $270,000 to $330,000 USD

About the Company

Rogo is transforming global finance by empowering professionals at top investment banks, private equity funds, and investment firms with artificial intelligence that delivers speed, accuracy, and insight. Backed by world-class investors, the company is defining a new category of enterprise AI with a rapidly growing global client base.

How to Apply

To apply for this position, please visit the official Rogo careers page and submit your application online.

Skills and tech stack

PythonAWSGCPKubernetesJavaRustC++Terraform

Questions candidates ask

What is the salary range for the Security Engineer, Product role at Rogo?

The annual salary range for this position is $270,000 to $330,000 USD.

Where is this job located?

This position is located in New York City and is an on-site role.

What type of security testing is the primary focus of this role?

This is a hands-on offensive security role focused on penetration testing, red team exercises, adversarial security assessments, and building automated security tooling for AI-driven platforms and cloud infrastructure.

What programming languages are preferred for this position?

Candidates should have development experience in a strongly typed language such as Rust, Go, Java, or C++, alongside scripting languages like Python or Bash.

How can I apply for this job?

You can apply by visiting the official Rogo careers page.

Ready to apply?

The application is on the official Rogo careers page.

Apply on company site