Principal Product Security Engineer

Role overview Set product security direction across major products and platforms, and lead long-running initiatives that reduce organizational risk. Partner closely with engineering and product leaders to turn security concerns into practical plans that teams can deliver, while building security into product design and daily development.

Responsibilities - Establish security guardrails for AI-assisted development across design, coding, testing, review, release and operations. - Lead cross-team programs such as secure development lifecycle improvements and vulnerability reduction. - Work with engineering to automate vulnerability detection, triage and remediation, including policy-as-code and security baselines. - Improve how penetration tests, assessments, bug bounty findings and red-team work result in lasting fixes. - Guide integration of code, dependency, license and infrastructure security tools into CI/CD workflows. - Advise leaders on risk and trade-offs, mentor security engineers, and translate emerging threats into changes to controls and product plans.

Requirements - 10+ years in software, product or application security, with ownership of complex products or platforms. - Deep knowledge of secure architecture for cloud-native or distributed systems, including identity, authorization and defense-in-depth. - Experience leading organization-wide security programs from planning through rollout. - Familiarity with containers, Kubernetes, public cloud controls and security compliance frameworks such as SOC 2, ISO 27001 or SLSA. - Ability to automate security workflows in a language such as Go, Python or Shell and integrate them into CI/CD. - Strong communication and influence skills for aligning senior stakeholders and distributed teams.

Nice to have - Experience with software supply-chain security, including SBOMs, provenance, signing or build hardening. - Offensive security, red-team or open-source development experience in security-sensitive projects. - Public writing or speaking on security, or involvement in industry standards and communities. - Experience in an early-stage or fast-growing organization.

Benefits and work setup - Remote-first work with team meetups, twice-yearly destination gatherings and a monthly coworking, phone and internet stipend. - Health, vision and dental premiums covered for employees and dependents; flexible time off and paid parental leave are offered. - Stock options are available, with a stated 10-year exercise window.