AI Product Security Engineer at Forescout Technologies Inc

Job description

Shape the Future of Cybersecurity at Forescout Every day cyberattacks threaten to disrupt hospitals, power grids, financial systems, and the infrastructure we all depend on. At Forescout, we build defenses that keep civilization running smoothly in an increasingly connected world. For more than 25 years, Fortune 100 organizations, government agencies, and large enterprises have trusted Forescout as their foundation to manage cyber risk, ensure compliance, and mitigate threats. From power grids and healthcare systems to financial networks and transportation hubs, Forescout protects the critical infrastructure of our modern world. What You Will Do We are seeking an experienced Product Security Engineer to design, build, and scale security capabilities at the scale of AI. This is a highly technical, hands-on role focused on operating AI-assisted vulnerability management, product security automation, and secure-by-design engineering practices. The ideal candidate combines deep expertise in application security, cloud security, DevSecOps, and AI technologies. This position focuses on building security into the SDLC and working with engineering teams develop, deploy, and operate secure products at scale. You will act as a force multiplier across Product Management, Engineering, Platform Engineering, Cloud Operations, Compliance, and Security teams by embedding security directly into the software development lifecycle and leveraging AI to increase both security coverage and engineering velocity. AI-Powered Vulnerability Management for Secure SDLC • Partner with Architects to define secure architecture patterns for Development, and Operate Product Security systems • Build AI-driven solutions into CI/CD to accelerate • • Vulnerability discovery • Triage and prioritization • Root cause analysis • Remediation recommendations • Validation testing • Penetration testing • Security documentation • Develop exploitability-aware prioritization models using business context, reachability, threat intelligence, and customer impact. • Reduce false positives and improve signal-to-noise ratios across Development tooling. • Implement automated workflows for CVE, KEV, SBOM, SAST, DAST, Dependency Management, EoL and SCA findings. Product Security Operations • Conduct threat modeling, design reviews, security assessments, and architecture reviews. • Partner with development teams to identify and remediate security weaknesses. • Participate in vulnerability response and incident response activities. • Work with engineering teams to reduce critical vulnerability exposure and accelerate remediation timelines. • Develop dashboards and metrics that measure risk reduction, security maturity, and remediation performance.   Compliance & Regulatory Support • Ensure security controls remain updated and align with customer, certification, and government requirements, ex. • • NIST Secure Software Development Framework (SSDF) • FedRAMP • ISO 27001 • SOC 2 • Common Criteria • CRA/NIS2 • Other regulatory requirements What You Bring to Forescout Security • 5+ years of experience in: • Product Security • Application Security • Cloud Security • DevSecOps • Security Engineering • Demonstrated experience securing enterprise-scale software products and cloud services. • Experience integrating security into modern SDLC pipelines. Technical Skills • Threat modeling • Secure design reviews • Vulnerability assessment • Penetration testing • Secure coding practices • Incident response • Software supply chain security • Penetration Testing Security Tooling Experience with several of the following: • Snyk • Wiz • Burp Suite • Tenable • GitHub Advanced Security • Claude Security • OpenAI SCT • Open Source AI tooling / harnesses • Veracode • Semgrep • SonarQube Cloud & Infrastructure • Azure • AWS • Kubernetes • Containers • Infrastructure-as-Code (Terraform) • Identity and access management • API security Programming Strong proficiency in one or more: • Python • Java • Go • C/C++ • JavaScript/TypeScript AI-Specific Qualifications • Hands-on experience using AI/LLM technologies in engineering or security workflows. • Understanding of: • Prompt injection attacks • RAG security risks • AI model abuse • Data poisoning • Tool misuse • Agent security • AI governance controls • Experience building or integrating AI-assisted automation solutions. • Familiarity with AI coding agents, copilots, and autonomous security workflows. Preferred Qualifications • CISSP, CSSLP, OSCP, GIAC, or equivalent certification. • Experience with AI red teaming and adversarial testing. • Experience building developer security platforms. • Experience securing SaaS products, APIs, and distributed systems. • Familiarity with enterprise-scale software delivery organizations. • Experience supporting FedRAMP or government cloud environments. What Forescout Offers You • Competitive compensation and benefits, including coverage of 85% of employee and dependent health care premiums, 100% company-paid employee life and disability insurance premiums, a 401(k) match, generous flexible time off for U.S. employees, voluntary life, accident, and critical illness insurance options, employee assistance program, maternity and parental bonding leave, and more. • A collaborative, innovative environment where you can help advance global security while working with leading technology. • Leadership teams that take ownership of team growth, actively supporting development, career progression, and opportunities for employees to do their best work. Learn more @ www.forescout.com . Our Mission - Continuously identify, protect, and ensure the compliance of all cyber assets across the modern organization. Our Values • One Team – We all work together, and we all win together. • Cyber Obsessed – We are curious about technology, and we are innovative and passionate about solving big programs. • Customer Driven – We listen, we learn, and we make it right. • Relentless – We're smart, determined, and find a way. We figure stuff out. • Collaborative, without Ego – No one succeeds alone. We strive to be the humble person that people want to work with. Thank you for taking the time to learn more about us. If this opportunity intrigues you, we encourage you to apply! At Forescout, we are “Cyber Obsessed”. We are committed to maintaining a secure environment for our customers, employees, and business operations. To support these efforts, candidates may be asked to complete job-related pre-employment screening and verification processes, to the extent permitted by applicable law. Depending on the role and location, these measures may include identity verification, employment verification, background screening, work authorization verification, and other lawful security-related checks. Forescout conducts these processes in accordance with applicable laws and regulations, i ncluding privacy and data protection requirements, and obtains any required notices, authorizations, or consent before conducting such screenings . Notice Regarding the Use of Artificial Intelligence in Recruitment As part of our recruitment process, we may use artificial intelligence ("AI") or automated decision-support tools to assist with reviewing applications, assessing job-related qualifications, matching candidates to role requirements, scheduling interviews, and supporting candidate evaluation. These tools are designed to assist our recruiters and hiring managers and are not the sole basis for hiring decisions. Qualified personnel review relevant candidate information and exercise human judgment throughout the recruitment process. We are committed to the responsible use of AI and seek to deploy and use AI-enabled recruiting tools in accordance with applicable laws, regulations, and our internal governance standards. NOTE TO EMPLOYMENT AGENCIES: We value the partnerships we have built with our preferred vendors. Forescout does not accept unsolicited resumes from employment agencies.

Requirements

Must-haves

Shape the Future of Cybersecurity at Forescout
AI-Powered Vulnerability Management for Secure SDLC
Partner with Architects to define secure architecture patterns for Development, and Operate Product Security systems
Build AI-driven solutions into CI/CD to accelerate
Vulnerability discovery
Triage and prioritization
Root cause analysis
Remediation recommendations
Validation testing
Penetration testing
Security documentation
Develop exploitability-aware prioritization models using business context, reachability, threat intelligence, and customer impact.
Reduce false positives and improve signal-to-noise ratios across Development tooling.
Implement automated workflows for CVE, KEV, SBOM, SAST, DAST, Dependency Management, EoL and SCA findings.
Product Security Operations
Conduct threat modeling, design reviews, security assessments, and architecture reviews.
Partner with development teams to identify and remediate security weaknesses.
Participate in vulnerability response and incident response activities.
Work with engineering teams to reduce critical vulnerability exposure and accelerate remediation timelines.
Develop dashboards and metrics that measure risk reduction, security maturity, and remediation performance.
Compliance & Regulatory Support
Ensure security controls remain updated and align with customer, certification, and government requirements, ex.
NIST Secure Software Development Framework (SSDF)
Common Criteria

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aici/cdazureawskubernetesapipythonjavagojavascripttypescriptllm

Platform: jobvite
Effort: medium

Benefits

Benefits detected in the listing.

401(K)