Valon Tech: Staff Product Security Engineer - Customer Platform at the Company Valon | Remote
Company/Recruiter: the Company Valon
Published on: 12:01 AM | May 17, 2026
✦ AI Summary
Valon is revolutionizing regulated finance with an AI-native operating system, starting with mortgage servicing.
Valon is revolutionizing regulated finance with an AI-native operating system, starting with mortgage servicing. We are a rapidly growing Series C company, backed by a16z, committed to innovating in complex industries. By building and operating our own mortgage servicing business, we've gained unparalleled insight into the intricacies of the sector. We are seeking a talented Staff Product Security Engineer to join our Customer Platform team, contributing to the security and integrity of our cutting-edge financial technology.
Job Overview
As a Staff Product Security Engineer on the Customer Platform team, you will be instrumental in ensuring the security posture of Valon's core product offerings. You will collaborate closely with engineering, product, and design teams to embed security best practices throughout the software development lifecycle, protecting our sensitive financial data and customer trust. This remote role offers the opportunity to shape the security of an AI-driven platform in a rapidly evolving industry.
Key Responsibilities
- Design, implement, and maintain security controls and architectures for the Valon Customer Platform.
- Conduct security reviews, threat modeling, and risk assessments for new features and services.
- Develop and champion secure coding practices and provide guidance to engineering teams.
- Respond to and investigate security incidents, performing root cause analysis and implementing preventative measures.
- Automate security processes and integrate security tooling into the CI/CD pipeline.
- Stay abreast of emerging security threats and vulnerabilities relevant to financial technology.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
- 5+ years of experience in product security engineering, application security, or a similar role.
- Deep understanding of secure software development lifecycle (SSDLC) principles.
- Proficiency in at least one programming language (e.g., Python, Go, Java).
- Experience with cloud security (AWS, GCP, Azure) and containerization technologies.
- Strong knowledge of common web vulnerabilities (e.g., OWASP Top 10) and mitigation techniques.
What We Offer
- Competitive compensation and equity.
- Comprehensive health, dental, and vision insurance.
- Generous paid time off and holidays.
- Remote work flexibility and support.
- Opportunities for professional development and growth.
- A collaborative and innovative work environment.