Staff Product Security Engineer (Security)

Key details

• Partner with engineering teams to identify and address security risks across mobile applications, web products, APIs, and backend services
• Lead security reviews for new products and major architectural changes, focusing on authorization boundaries, sensitive data, transaction integrity, key material, and third-party integrations
• Embed practical security controls into the software development lifecycle from design through production operation
• Perform AI-assisted security code reviews and targeted testing of high-risk features, building repeatable vulnerability discovery approaches
• Develop and improve security tooling that provides fast, actionable feedback without unnecessary friction
• Harden CI/CD, build, and release systems against supply chain threats including dependency risk, secrets exposure, build provenance, and artifact integrity
• Triage findings from internal testing, researchers, bug bounty, and third-party assessments, driving issues through verified remediation
• Support investigation of product security incidents and turn lessons into durable improvements
• Establish product security patterns and expectations across engineering; lead ambiguous cross-functional initiatives at Staff level
• Company mission
• Information not specified