Sr Product Security Engineer(m/w/x)

Description

As the first dedicated security hire, you will shape the company's security culture by implementing pragmatic practices and managing everything from vulnerability disclosures to incident response.

Requirements

• •Experience in product security or equivalent
• •Experience with vulnerability management workflows
• •Understanding of web application vulnerabilities
• •Experience operating security tooling
• •Familiarity with coordinated vulnerability disclosure
• •Ability to write security documentation
• •Experience with bug bounty programs
• •Experience securing cloud-native SaaS platforms
• •Familiarity with JavaScript and Node.js
• •Experience in high-growth companies
• •Knowledge of DevSecOps practices
• •Experience with threat modeling methodologies
• •Relevant security certifications
• •Prioritization of pragmatic risk reduction
• •Security as product velocity enabler
• •Comfort making high-impact risk trade-offs
• •Thriving in ambiguity and ownership
• •Right to work or visa eligibility
• •English language proficiency

Tasks

• •Own the vulnerability intake and triage process
• •Manage the security inbox and disclosure programs
• •Coordinate private fixes for high-severity issues
• •Manage GitHub Security Advisories and disclosure timelines
• •Oversee bug bounty payouts and researcher communication
• •Define patch and release processes for security fixes
• •Implement and maintain security tooling across the SDLC
• •Tune and manage triage workflows for security tools
• •Plan and manage third-party penetration tests
• •Conduct internal security assessments and tabletop exercises
• •Lead security incident coordination from detection to resolution
• •Drive incident tracking and remediation workflows
• •Author security advisories and post-incident reviews
• •Communicate with customers during security incidents
• •Maintain security policies and public disclosure documentation
• •Manage relationships with security researchers and platforms
• •Track industry trends and emerging vulnerabilities
• •Shape long-term security strategy and roadmaps
• •Embed security into the development lifecycle
• •Advise engineering teams on secure coding practices
• •Produce actionable security documentation for internal teams
• •Partner with product teams to build in security

Tools & Technologies

Benefits