Product security engineer

We're looking for a Product Security Engineer who combines deep security fundamentals with real engineering execution. This is not a role for someone who audits from a distance or advises without getting their hands dirty. You'll be in the code, spotting systemic patterns, and building the tooling and solutions that address them at scale.

Responsibilities

Identify systemic security gaps in the codebase and engineering workflows, and work with engineering teams to design and ship durable solutions; Build security tooling, automation, and code-level controls that address classes of vulnerabilities, including custom linters, static analysis rules, and automated checks; Conduct in-depth code reviews and security design reviews for significant product initiatives; Drive threat modeling and security assessments for new features, and translate security requirements into practical engineering guidance; Contribute to the team's approach to security as AI-assisted development scales internally; Triage, track, and drive remediation of vulnerabilities with product engineering teams, and contribute to penetration testing and bug bounty programs

Requirements

5+ years of hands-on experience in application security and security engineering; The ability to operate independently with good judgment in a fast-moving environment; Communication that earns trust and makes security legible to engineers; A track record of shipping security tooling or automation that improved things for more than one team; Genuine engineering depth to read, reason about, and review code; Comfort working in TypeScript and Python; Strong AppSec fundamentals including threat modeling, secure code review, and addressing vulnerability classes durably; A pragmatic, signal-oriented relationship with AI tooling

Nice to have

Offensive security experience such as bug bounty, CTF participation, red teaming, or pentesting work; Experience building or contributing to SAST pipelines, custom static analysis rules, or automated security testing infrastructure; Prior experience at a startup or high-growth scaleup

Benefits

Comprehensive benefit plan including medical, dental, vision, and 401(k); Additional compensation in the form of equity and/or commission, dependent on the position offered; Generous benefits for all employees