Staff Security Engineer, Product Security

Role overview

Set product security direction across a broad portfolio of products and services. You will combine hands-on security engineering with architecture leadership, helping teams build secure systems and extending your influence through shared tools, practices, and training.

Responsibilities

- Define security architecture, reusable patterns, and reference implementations that make secure choices easier for product teams. - Lead reviews of high-risk features and establish standards for security reviews across engineering. - Conduct threat modeling and attack surface analysis across products, and work with engineering leaders on design tradeoffs. - Set practices for triaging and reproducing vulnerability reports, taking on the most complex cases and driving fixes for recurring vulnerability types. - Build and maintain security services and tools used by product teams; grow security champions and product security training. - Mentor security engineers and advise engineering leadership on product security decisions.

Requirements

- Extensive product or application security experience, including hands-on work building security tools and services; the source indicates roughly eight or more years as a typical background. - Evidence of designing security architecture that scales across multiple teams and services. - Strong web application security knowledge and practical experience with application testing tools. - Software development experience in a modern language such as Go, Python, Java or Kotlin, TypeScript, or Ruby. - Experience leading technical initiatives across teams and mentoring engineers.

Nice to have

- Experience establishing or expanding a security champions program. - Familiarity with identity management and federation, including SAML, OAuth, or SCIM. - Experience with cloud infrastructure, Kubernetes, containers, or service-oriented systems. - Exposure to bug bounty programs, static analysis tools, or pre-release code audits of internal or open-source libraries.

Benefits and work setup

The team works across continents using video, messaging, and asynchronous documentation. The listing describes an agile working style and provides hardware and software for the role.