Product Security Engineer: Secure-by-Default & AI Security

Asana, Inc.; Warszawa; Hybrid; PLN 346,000 - 402,000; Full time

Benefits offered by this job

Health insurance

Office meals

Vacation allowance

Career growth budget

Home office budget

MacBook

Gym membership

Dental coverage

Job summary

Asana, Inc. in Warsaw is seeking a Product Security Engineer to join our Product Security team. You will partner with product and infrastructure teams to ensure secure-by-default software across web, mobile, and AI surfaces.

You will build secure frameworks, scale security tooling, and drive remediation of vulnerabilities—while improving supply chain security and fostering a security-first mindset across engineering.

Qualifications

• 5+ years of experience in security-focused roles within software development.
• Strong background in Python, JavaScript/TypeScript or Scala.
• Solid knowledge of OWASP Top 10 and web vulnerabilities.
• Experience with AI/ML security concepts and risks.
• Hands-on with SAST/DAST and SCA tools and vulnerability management.
• Ability to perform security design reviews and threat modeling.
• Excellent written and verbal communication for cross‑functional teams.
• Curiosity about AI tools and emerging security tech.

Responsibilities

• Partner with product and engineering teams to bake security into the full software lifecycle.
• Conduct security architecture reviews, threat modeling, and code reviews for new features.
• Develop and maintain secure-by-default frameworks and libraries.
• Build and maintain automated security tooling to scale coverage.
• Address AI-specific security risks in AI/agent features.
• Triage and remediate vulnerabilities from bug bounty, testing, and tooling.
• Influence engineering roadmaps by communicating security constraints.
• Investigate security incidents using logs and monitoring tools.
• Improve software supply chain security and third-party risk management.
• Deliver training on secure coding and emerging threats.

Skills

5+ years of security experience

Python, Javascript/Typescript or Scala

OWASP Top 10 knowledge

AI/ML security concepts

SAST/DAST tools experience

SCA tooling experience

Threat modeling

Security design reviews

Strong communication

Curiosity about AI tools

Tools

SAST/DAST tooling

SCA tooling

Code review tooling

Job description

Asana, Inc. in Warsaw is seeking a Product Security Engineer to join our Product Security team. You will partner with product and infrastructure teams to ensure secure-by-default software across web, mobile, and AI surfaces.

You will build secure frameworks, scale security tooling, and drive remediation of vulnerabilities—while improving supply chain security and fostering a security-first mindset across engineering.