Product Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
Responsibilities:
- Collaborate with Product Engineering teams throughout the SDLC
- Create threat models
- Conduct design reviews, secure code reviews, and manual testing to identify vulnerabilities
- Develop and implement end-to-end security solutions across the product suite
- Improve Product Security tooling, automation, and the bug bounty program
- Experiment with and develop AI-based tools for the Security team
- Engage stakeholders across engineering teams
- Communicate security risks and trade-offs
- Keep customer data secure
- Build identity models, guardrails, and secure-by-default platforms for products and AI systems
- Secure AI agents and applications
- Automate KTLO and toil work
Requirements:
- 5+ years of relevant experience in securing applications at scale
- Experience with threat modeling, design reviews, secure code reviews, and web app pentesting across the secure SDLC
- Familiarity with SAST, DAST, and SCA tools
- Experience using AI to solve security challenges at scale
- Software engineering or programming experience in at least one language such as Java, Python, JavaScript, or Go
- Experience managing vulnerability disclosure programs or conducting security research on HackerOne or Bugcrowd
- Ability to think like an adversary to identify risk and build engineering mitigations
- Ability to work independently with minimal guidance and manage tasks and priorities across multiple projects
- Ability to analyze and execute work efficiently
- Ability to collaborate effectively with cross-functional teams
- Ability to thrive in fast-paced, results-driven environments
- Authorization to be employed in the United States is requested in the application form
Benefits:
- Excellent health care, including medical, dental, vision, mental health, and fertility benefits
- Disability and life insurance options
- 401(k) and RRSP matching
- Paid parental leave
- 20 days of paid time off per year
- 12 days of paid holidays per year
- Two floating holidays per year
- Flexible sick time
- Caregiving stipend
- Pet care stipend
- Wellness stipend
- Home office stipend
- Annual professional development budget
- Professional development opportunities
- Equity
Similar Jobs
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Digital Security Specialist – Offensive and Defensive Security
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.
Senior Instructor, Training – Cloud Security
Cloud security instructor delivering hands-on CNAPP and Falcon Cloud Security training. Developing courses, certification exams, and labs for CrowdStrike customers.
Cloud Azure Security Engineer
Cloud Azure Security Engineer securing Microsoft Azure environments for Monks, a global AI-powered transformation consultancy. Managing Entra ID, compliance controls, vulnerabilities, and cloud security automation.
Staff Product Security Engineer
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.
Security Assessor
Security Assessor evaluating federal information systems against NIST RMF and FedRAMP requirements. Conducting control assessments, risk analysis, ATO support, and compliance documentation remotely.
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.
Manager, Cloud Security Engineering
Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.
Security Engineer
Security Engineer owning vulnerability management, SIEM, and incident investigations. Securing cloud-native AWS environments for Arionkoder’s AI consulting clients.
IT Systems and Security Specialist I
IT systems and security specialist supporting Aspire Living & Learning’s service operations remotely. Maintaining IT systems and security while traveling periodically across the service area.
Associate, Cybersecurity – Data Privacy Incident Response
Associate attorney advising clients through cybersecurity incidents, data breaches, and breach notification requirements. Supporting Constangy's national Cybersecurity & Data Privacy practice.