Principal Product Security Researcher

Role overview Set the research direction for product security, identifying emerging threats and translating findings into durable improvements across products, platforms, and organizational practices. This principal-level role combines hands-on threat analysis with strategic influence: partnering with senior leaders to shape roadmaps and architecture, while helping advance security discussions across the wider industry.

Responsibilities - Lead research into emerging software supply chain and product security threats, assessing their likely impact on products and customers. - Turn research findings into practical mitigations across technology, processes, and team practices. - Work with product, engineering, and security leaders to incorporate security insights into architecture choices, roadmaps, and long-term plans. - Identify recurring weaknesses and develop initiatives that address root causes and create lasting improvements. - Influence senior stakeholders, build support for complex security changes, and help teams weigh security, delivery speed, and reliability. - Mentor colleagues and represent security research through external talks, conferences, and thought leadership.

Requirements - Deep product or application security experience, including leadership of threat-focused research that produced clear organizational outcomes. - Expert knowledge across several areas such as secure architecture, software supply chain security, product security, and organizational risk management. - Ability to turn uncertain, cross-functional problems into prioritized initiatives that teams can implement and sustain. - Strong executive communication skills, including presenting complex technical issues and gaining alignment on decisions. - Current understanding of security research, tools, and industry trends, with the ability to apply findings pragmatically. - High ownership and independent judgment, paired with collaborative work across teams; comfort building structure in fast-changing contexts.

Benefits and work setup The role is listed for candidates based in the United States, Canada, or the United Kingdom. The organization describes a remote-first model with team meetups and twice-yearly destination gatherings, plus a monthly stipend for coworking, phone, and internet costs. Listed benefits include stock options, full coverage of health, vision, and dental premiums for employees and dependents, flexible paid time off, and paid parental leave.