Product Security Engineer

Role overview

Join the security team of a developer-focused platform that builds APIs and infrastructure for enterprise authentication, identity, and access control. The Product Security Engineer partners closely with engineering to keep customer data and identities safe, blending hands-on offensive testing with defensive design work. This is a deeply collaborative, code-comfortable role for someone who thinks like an attacker and ships like a builder.

Responsibilities

- Lead secure design reviews and partner with engineering teams throughout the product lifecycle to identify and prioritize risks early. - Develop "paved path" systems and defaults that make secure development the easiest option for engineers. - Conduct penetration tests and code audits on new and existing products from an adversarial perspective. - Integrate and improve static analysis, supply chain security, and vulnerability management tooling across engineering pipelines. - Operate and continuously improve the responsible disclosure program, including triage, automation, and remediation coordination. - Write and ship production code to remediate vulnerabilities and harden the platform's security posture. - Engage directly with customers on security-related questions to build trust and address concerns.

Requirements

- 5+ years of experience in security engineering or security-focused software engineering. - Demonstrated ability to execute across multiple security functions, including assessments, penetration testing, responsible disclosure, and tooling integration. - Track record of identifying software vulnerabilities, shown through CVEs, bug bounty reports, blog posts, or equivalent work experience. - Comfort reading and writing code, with the ability to use AI tools effectively during the process. - Strong written and verbal communication skills, especially when partnering with engineering teams.

Nice to have

- Experience in the authentication and identity domain. - Experience writing production-level code, particularly security features.

Benefits and work setup

- Healthcare, dental, and vision coverage for employees and their families, plus FSA and disability options. - 401(k) matching and competitive equity. - 20 days paid vacation, 10 holidays, and unlimited sick leave. - 12 weeks of fully paid parental leave. - Monthly fitness and wellness stipends, plus fertility benefits and commuter support for hybrid employees in major US metro areas. - Fully remote working arrangements available, with AI tooling usage supported for the role.