# Staff Application & Product Security Engineer at Cleo

- Company: Cleo
- What the company does: Backed by Greylock, NEA and Entrepreneur First.
- Company website: https://hicleo.com/
- Type: Startups
- Level: Senior
- Location: Remote US
- Work setup: Remote
- Pay: $160K to $180K base salary per year (USD)
- Posted: 2026-10-02
- Apply by: 2026-11-23
- Apply: https://job-boards.greenhouse.io/cleo/jobs/4739273005?utm_source=1752vc&utm_medium=careers
- Page: https://www.1752.vc/careers/jobs/cleo-staff-application-and-product-security-engineer/

## About the role

You will be the most senior hands-on application security engineer at Cleo, owning both how security is built into our products from design through release and the security posture of the products we ship, both on-premise and SaaS, as our customers experience them. This is a Staff-level individual contributor role with real program ownership: you set the standards, build the guardrails, and work directly with engineers in the code. Found on 1752vc Careers, the job board for startup and VC roles.

## What they're looking for

- Own and mature Cleo’s SSDLC: security requirements, threat modeling, and design reviews for high-risk product changes, APIs, and integrations
- Run and tune SAST, SCA, secrets detection, container, and IaC scanning
- Build reusable secure patterns, reference implementations, and policy-as-code controls that make the secure path the default path
- Own the penetration testing program: scope and coordinate third-party engagements, perform targeted testing yourself, and validate findings through retesting
- Run our Vulnerability Disclosure Program, including researcher communications and coordinated disclosure
- Coordinate the CVE lifecycle for Cleo products and support product-security incident response

Tags: Information Security

Source: 1752vc Careers, https://www.1752.vc/careers/jobs/cleo-staff-application-and-product-security-engineer/