Staff Security Engineer, Product Job at Rogo (New York City)

Staff Security Engineer, Product

Rogo

Location:
United States , New York City

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

At Rogo, we are building Wall Street's first true AI analyst. Our mission is to empower finance professionals at the world’s top investment banks, private equity funds, and investment firms with AI that delivers unparalleled speed, accuracy, and insight. We are not just improving financial workflows; we are redefining them from the ground up. As a Staff Security Engineer at Rogo, you’ll play a key role in strengthening the security of our products, applications, and cloud environments. You’ll identify and address vulnerabilities through code reviews, penetration testing, and security assessments, while also building tools and automation that improve how we protect our AI-driven platform. You’ll partner closely with development teams to integrate security into the software development lifecycle, ensuring secure coding practices and automated scanning are part of everyday workflows. Beyond engineering, you’ll provide guidance to stakeholders and help continue to foster a culture where security is a shared responsibility.

Job Responsibility:

Drive product and application security by designing and building backend systems, abstractions, tooling, and guardrails that enable the entire engineering team to ship products secure-by-default
Design, build, and maintain backend features, frameworks, services, and automation that enforce security controls across the platform
Perform dynamic security reviews, threat modeling, and penetration testing of applications and APIs
Own the end-to-end implementation of automated security reviews within Rogo’s SDLC
Contribute directly to backend codebases by fixing and remediating vulnerabilities discovered via SAST, DAST, SCA, IaC, or internal tooling
Design and implement security tools and automated pipelines that streamline developer workflows and integrate deeply with Rogo’s platform
Build and maintain test environments and simulation ranges to validate security controls at scale
Partner with engineers across the company to embed secure coding practices and guardrails into CI/CD pipelines
Create and maintain secure coding standards and provide guidance and training to developers
Review and secure cloud infrastructure and kubernetes deployments, including hands-on Terraform and other IaC improvements, as it relates to product security
Respond to security incidents, perform root cause analysis, and strengthen systems against recurring risks
Share emerging security threats, patterns, and best practices with engineering and leadership teams

Requirements:

Strong backend engineer whose primary job is to design, build, and maintain the abstractions, tooling, and guardrails that allow the entire engineering team to ship product securely by default, without slowing down velocity
Worked as a backend engineer owning systems, services, or platforms, building security capabilities directly into those systems
Professional experience developing in a strongly typed language (e.g., Rust, C++, Java)
Demonstrated deep experience in application security testing, penetration testing, and code review
You’ve worked with, or are excited to learn, tools that help you understand how systems behave under stress or misuse (security-specific tools like Burp, ZAP, or Snyk are a plus)
You’ve integrated automated checks into CI/CD pipelines (SCA, SAST, DAST)
You’re comfortable working with infrastructure automation (Terraform or equivalents)
Strong communication skills and ability to collaborate with developers, product teams, and leadership
Applied knowledge of threat modeling, cryptography fundamentals, and vulnerability management
Understanding of security frameworks such as SOC 2, CIS Benchmarks, ISO 27001/42001, or NIST CSF

Nice to have:

Hands-on cloud security experience in AWS or GCP
Familiarity with Kubernetes security (RBAC, admission controllers, ingress, and network policies)
Customer facing meetings when deep dive sessions are needed

Additional Information:

Job Posted:
February 18, 2026

Employment Type:

Fulltime

Work Type:

On-site work

Rogo - All Job Offers

Job Link Share: