Staff Product Security Engineer

About Blackhawk Network :

Today, through BHN's single global platform, businesses of all kinds can tap into the world's largest network of branded payment solutions. BHN helps businesses grow revenue, increase loyalty, motivate and reward their teams, disburse funds and engage consumers. Branded payment solutions include the issuance and distribution of gift cards, egifts, corporate payouts and rewards, along with the technology to deliver these products in seamless, integrated ways. BHN's network spans the globe with more than 400,000 consumer touchpoints. Learn more at BHN.com.

Overview :

We're looking for a Staff Product Security Engineer to lead security initiatives across our AI / ML and cloud-based platforms. This role requires deep expertise in application security, secure ML pipelines, and AI governance, with hands-on experience in tools like LangChain, AWS Bedrock, and FastMCP. You'll drive security architecture for LLM integrations such as RAG, Tool Calling, and MCP, and embed security into CI / CD workflows using Jenkins and SSDLC tools (SAST, DAST, SCA, SBOM).

You'll collaborate across teams to design secure systems in AWS (IAM, VPC, ECS, EKS), mentor engineers, and influence security strategy in a fast-paced, enterprise environment. Strong communication, risk assessment skills, and experience in regulated industries are key to success in this role.

Responsibilities :

• Lead security architecture design initiatives and drive strategic security decisions for global security posture
• Provide expert guidance on AI / ML security implementations, including model security and secure machine learning pipelines
• Design and implement AI and LLM strategies integrating security controls throughout the software development lifecycle
• Manage and mature security tooling ecosystem including Jenkins CI / CD, SAST, SCA, DAST, and API security solutions with the help of AI and LLM Technologies
• Mentor security teams and conduct security design reviews for complex security initiatives

Qualifications :

Additional Requirements :

Skills Required

DAST, Jenkins, Security Architecture, SCA, Application Security, SAST, AWS IAM