Remote AI-Driven Product Security Engineer

Remote Jobs; Canada; Remote; CAD 279,000 - 349,000; Full time

Benefits offered by this job

Equity

Bonus program

Medical insurance

Remote stipend

Flexible hours

Unlimited vacation

401(k)

Wellness benefit

Global off-sites

Job summary

Phantom is building an AI-native security team. This Staff-level role spans architecture, source code, testing, and production systems across Phantom’s mobile, web, and backend products.

You’ll work with engineering and product teams to lead complex security initiatives and raise the bar for secure design. You’ll set technical direction, collaborate to translate security risks into engineering requirements, and drive durable improvements that protect tens of millions of users and the integrity

Qualifications

• 5+ years of experience in product security, application security, security engineering, or software engineering at senior or staff level.
• Strong understanding of web, mobile, API, and distributed-system security, including authentication, authorization, session management, cryptography, and common vulnerability classes.
• Hands-on experience building or applying AI-assisted security tooling to test applications and APIs, combining automated analysis with source-code review and manual validation.
• Able to review production code in TypeScript, JavaScript, Rust, Python and Go.
• Experience securing software supply chains and CI/CD systems, including dependencies, build infrastructure, secrets, artifacts, signing, and release integrity.
• Experience threat modeling complex products and translating security risks into concrete engineering requirements.
• Strong judgment in evaluating exploitability, business impact, and remediation.

Responsibilities

• Own product security across Phantom’s mobile applications, web products, APIs, and backend services.
• Lead security reviews and threat modeling for new products and major architectural changes.
• Embed practical security controls into the software development lifecycle from design through production.
• Perform AI-assisted security code reviews and targeted testing of high-risk features.
• Develop tooling to provide engineers fast, actionable security feedback with automation.
• Harden CI/CD, build, and release systems against supply chain threats and integrity risks.
• Triage findings from testing, bug bounties, and third-party assessments to drive remediation.
• Support incident investigations and turn lessons into durable improvements.
• Establish product security patterns and lead cross-functional initiatives at staff level.

Skills

Security engineering

Threat modeling

Secure coding

Security testing

Languages TS/JS/Rust/Python/Go

Security leadership

AI-assisted tooling

Tools

AWS

Kubernetes

CI/CD

Cloud-native architectures

Job description

Phantom is building an AI-native security team. This Staff-level role spans architecture, source code, testing, and production systems across Phantom’s mobile, web, and backend products.

You’ll work with engineering and product teams to lead complex security initiatives and raise the bar for secure design. You’ll set technical direction, collaborate to translate security risks into engineering requirements, and drive durable improvements that protect tens of millions of users and the integrity