Staff Product Security Engineer

What you'll do

• Act as the primary point of contact for high-value products to manage their security posture and communication.
• Perform threat modeling and design reviews for major releases, platform developments, and new services.
• Synthesize complex security signals into a curated list of actionable priorities for product teams.
• Integrate security activities like penetration testing and vulnerability remediation into the standard release process.
• Identify systemic risk patterns to build reusable security frameworks and "paved roads" at scale.
• Provide technical leadership, mentorship, and knowledge sharing through tech talks and white papers.
• Research emerging threats in AI/ML and agentic systems to contribute to the organization's roadmap.

What we're looking for

• Hold a Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related field.
• Possess 10+ years of experience in Application or Product Security.
• Demonstrate a history of building end-to-end security solutions adopted across multiple engineering teams.
• Prove ability to threat model complex, distributed, and AI/ML systems while making risk-based decisions.
• Maintain solid knowledge of application architectures, cloud infrastructure (AWS, Azure, GCP), and containerized environments.
• Possess broad knowledge of vulnerability classes (OWASP Top 10, SANS) and authentication mechanisms (SAML, OAuth/OIDC, zero-trust).
• Perform security code reviews across multiple languages and stacks.
• Utilize standard security tooling like Burp Suite and Kali Linux to build or customize tools when needed.