Product Security Engineer - Hybrid (Warsaw)

Asana; Warszawa; Hybrid; PLN 346,000 - 402,000; Full time

Benefits offered by this job

Health insurance

Breakfast/lunch catering

Vacation allowance

Career growth budget

Home office setup budget

Gym/Fitness card

MacBooks with accessories

Job summary

Asana is seeking a Product Security Engineer in Warsaw to embed security in the product and development lifecycle, partnering with product and infrastructure teams to design and ship secure software across web, mobile, and AI-enabled surfaces.

This role requires hands-on security engineering, threat modeling, and strong coding skills (Python, JavaScript/TypeScript, or Scala). You will build secure-by-default frameworks and tooling while guiding AI security efforts.

Qualifications

• 5+ years of experience in application or product security.
• Strong software engineering background in Python, JS/TS, or Scala.
• Deep knowledge of the OWASP Top 10 and common web vulnerabilities.
• Familiarity with AI/ML security concepts and prompt injection risks.
• Experience with security testing tools (SAST/DAST) and SCA.
• Ability to perform security design reviews and threat modeling.
• Excellent communication with technical and non-technical partners.
• Curiosity about AI tools and emerging tech.

Responsibilities

• Partner with product and engineering teams across the full software development lifecycle to embed security in the product.
• Conduct security architecture reviews, threat modeling, and code reviews for new features and services.
• Develop secure-by-default frameworks and libraries for engineering teams.
• Build automated security tooling to scale security coverage without headcount growth.
• Address AI-specific security risks such as prompt injection and agentic attack surfaces.
• Triage, investigate, and drive remediation of vulnerabilities from bug bounty programs and testing.
• Influence engineering roadmaps by communicating security constraints and trade-offs.
• Investigate product security incidents using logs and monitoring tools to contain and resolve issues.
• Evaluate and improve software supply chain security and third-party risk.
• Deliver training to educate engineers on secure coding practices.
• Stay informed of industry threats and best practices to keep Asana secure.
• Collaborate on short- and long-term risk strategies.

Skills

Python

JavaScript/TypeScript

Scala

OWASP Top 10

AI/ML security

SAST/DAST

Threat modeling

Security design reviews

Communication

Tools

SAST tools

DAST tools

SCA tools

Job description

Asana is seeking a Product Security Engineer in Warsaw to embed security in the product and development lifecycle, partnering with product and infrastructure teams to design and ship secure software across web, mobile, and AI-enabled surfaces.

This role requires hands-on security engineering, threat modeling, and strong coding skills (Python, JavaScript/TypeScript, or Scala). You will build secure-by-default frameworks and tooling while guiding AI security efforts.