Product Security Engineer - Build Secure-by-Design Software

Decisive Point; Warszawa; Hybrid; PLN 346,000 - 402,000; Full time

Benefits offered by this job

Health insurance with dental andtravel

Office-centric hybrid schedule

RSUs and base salary

Meal catering at office

Vacation allowance

Career growth budget

Home office setup budget

MacBook and accessories

Job summary

Asana is seeking a Product Security Engineer to embed security across the software development lifecycle in Warsaw. You will partner with product and infrastructure teams to design and ship secure software, build secure-by-default frameworks, and drive remediation of vulnerabilities from testing and bug bounty programs.

The role is office-centric with hybrid days and a focus on security across web, mobile, and AI-powered surfaces, including AI risk management and security tooling development.

Qualifications

• 5+ years of experience in application security, product security, or software engineering with a security focus.
• Strong software engineering background with Python, JavaScript/TypeScript, or Scala.
• Deep knowledge of OWASP Top 10 and common web vulnerabilities (XSS, CSRF, SSRF, SQLi).
• Familiarity with AI/ML security concepts including prompt injection and agentic attack surfaces.
• Experience with SAST/DAST, SCA tools, and vulnerability management.
• Experience performing security design reviews and threat modeling for complex apps.
• Excellent communication for cross-functional collaboration.

Responsibilities

• Partner with product and engineering teams to embed security in the software development lifecycle.
• Conduct security architecture reviews and threat modeling for new features.
• Develop and maintain secure-by-default frameworks and libraries.
• Build automated security tooling (static/dynamic analysis, SCA) to scale coverage.
• Address AI-specific security risks in AI-powered features.
• Triage and drive remediation of vulnerabilities from bug bounty and testing.
• Influence engineering roadmaps with security constraints and trade-offs.
• Investigate security incidents using logs and monitoring tools.
• Improve software supply chain security and dependency management.
• Deliver training on secure coding and emerging threats.
• Stay updated on threats and industry best practices.

Skills

Security engineering

Python

JavaScript/TypeScript

Scala

Threat modeling

SAST/DAST

AI security

Communication

Security architecture

Tools

Static analysis tools

Dynamic analysis tools

Code review tools

Job description

Asana is seeking a Product Security Engineer to embed security across the software development lifecycle in Warsaw. You will partner with product and infrastructure teams to design and ship secure software, build secure-by-default frameworks, and drive remediation of vulnerabilities from testing and bug bounty programs.

The role is office-centric with hybrid days and a focus on security across web, mobile, and AI-powered surfaces, including AI risk management and security tooling development.