OneTrust is seeking a Senior Product Security Engineer to lead hands-on product security work across web and mobile surfaces, including penetration testing, remediation guidance, customer-facing security engagements, bug bounty operations, and vendor coordination. The role will help expand coverage for AI-enabled features and agentic integrations. Responsibilities include conducting application-level penetration testing across product surfaces, partnering with customers to coordinate tests and provide practical remediation guidance to engineering teams, managing bug bounty workflows with external researchers, and coordinating with product security vendors and internal stakeholders to improve testing effectiveness. You will build and improve security automation and internal tooling, including AI-assisted workflows that support testing, triage, and validation across product security programs. You will assess AI-enabled product features, agentic workflows, retrieval pipelines, and tool integrations for risks such as prompt injection, tool misuse, tool poisoning, excessive permissions, and data exfiltration. You will also test MCP servers and integrations through direct protocol testing, trusted-client testing, and multi-server adversarial scenarios, validating tool descriptions, schemas, permissions, and runtime behavior, and partner with engineering teams to embed secure development practices for MCP and AI-connected components. Qualifications include proven experience in penetration testing and software security, strong knowledge of security protocols, cryptography, and netw

OneTrust is seeking a Senior Product Security Engineer to lead hands-on product security work across web and mobile surfaces, including penetration testing, remediation guidance, customer-facing security engagements, bug bounty operations, and vendor coordination. The role will help expand coverage for AI-enabled features and agentic integrations. Responsibilities include conducting application-level penetration testing across product surfaces, partnering with customers to coordinate tests and provide practical remediation guidance to engineering teams, managing bug bounty workflows with external researchers, and coordinating with product security vendors and internal stakeholders to improve testing effectiveness. You will build and improve security automation and internal tooling, including AI-assisted workflows that support testing, triage, and validation across product security programs. You will assess AI-enabled product features, agentic workflows, retrieval pipelines, and tool integrations for risks such as prompt injection, tool misuse, tool poisoning, excessive permissions, and data exfiltration. You will also test MCP servers and integrations through direct protocol testing, trusted-client testing, and multi-server adversarial scenarios, validating tool descriptions, schemas, permissions, and runtime behavior, and partner with engineering teams to embed secure development practices for MCP and AI-connected components. Qualifications include proven experience in penetration testing and software security, strong knowledge of security protocols, cryptography, and netw