Staff Product Security Engineer

About The Company

Valon is building the AI-native operating system for regulated finance, starting with mortgage servicing. A Series C company backed by a16z, Valon transformed mortgage servicing from a 0% margin business into 60%+ margins by replacing legacy systems with a unified, programmable platform, ValonOS.

Security at Valon

The Security team safeguards sensitive financial information and supports secure, scalable product capabilities. Working cross-functionally, they engage with external auditors and partners to consistently evaluate Valon’s security posture.

About The Role

The Staff Product Security Engineer is a key security member responsible for designing, building, and scaling secure features for ValonOS. This hands-on role involves developing security architecture, threat modeling, design reviews, and compliance engagements to protect multi-tenant SaaS platforms and customer data.

Responsibilities

• Define and evolve product security architecture and strategy for a multi-tenant SaaS platform.
• Architect secure customer-facing security capabilities such as authentication, authorization, and encryption.
• Maintain security reference architectures and secure design patterns.
• Lead threat modeling, security design, and code reviews on new features.
• Collaborate with cross-functional teams to mitigate product and data security risks.
• Support vulnerability triage, remediation, and incident response.
• Enforce security policies, standards, and procedures to comply with regulations.

Ideal Background & Minimum Qualifications

Candidates should have 8+ years of progressive security engineering experience, with proven expertise in SaaS security, cloud infrastructure (GCP preferred), and security frameworks (OWASP, SOC 2, etc.). A Bachelor’s degree in a related field and relevant security certifications (CISSP, CISM, etc.) are required. Prior software engineering experience, flexibility in high-growth startup environments, and excellent communication skills are also essential.

Benefits

• Competitive salary with equity and 401k plan
• Comprehensive health, dental, and vision benefits
• Pre-tax transit and commuter benefits
• Robust onboarding and continuous learning opportunities
• Generous paid time off including parental leave

Application Process

All email communication during the interview process will come from a @valon.com address. For verification, reach out to talent@valon.com.

Key skills/competency

• Security Architecture
• SaaS Platforms
• Cloud Security
• Threat Modeling
• Compliance
• IAM
• Encryption
• Risk Mitigation
• Penetration Testing
• Secure Coding