Hybrid Product Security Engineer: AI & Secure-by-Default

Superhuman; Seattle (WA); Hybrid; USD 188,000 - 250,000; Full time

Benefits offered by this job

Excellent health care

401(k) matching

Paid parental leave

Job summary

Superhuman is hiring a Product Security Engineer to build a secure, AI-native platform and protect our products as they scale. You will design threat models, perform reviews, and implement end-to-end security solutions while advancing security tooling and automation across teams.

You will collaborate with engineering to enable fast, secure delivery and respond to vulnerabilities via bug bounty programs, all while keeping customer data secure and resilient.

Qualifications

• Has 3+ years of relevant experience in securing applications at scale.
• Experience with secure SDLC: threat modeling, design reviews, secure code reviews, and web app pentesting.
• Familiarity with SAST, DAST and SCA tool suites.
• Experience using AI to solve security challenges at scale.
• Programming in Java, Python, JavaScript or Go.
• Experience with vulnerability disclosure programs or bug bounty platforms.
• Ability to think like an adversary to identify risk and mitigate it.
• Proven track record of independent, proactive task management.

Responsibilities

• Collaborate with Product Engineering throughout SDLC to identify vulnerabilities.
• Develop end-to-end security solutions across the product suite.
• Improve Product Security tooling, automation, and bug bounty programs.
• Experiment with AI-based tools to accelerate security workflows.
• Communicate security risks clearly to stakeholders while protecting data.

Skills

Security engineering

Threat modeling

Secure code reviews

AI in security

Programming languages

Bug bounty programs

Adversary mindset

Independent contributor

Education

Computer science or related field

Tools

SAST

DAST

SCA

Job description

Superhuman is hiring a Product Security Engineer to build a secure, AI-native platform and protect our products as they scale. You will design threat models, perform reviews, and implement end-to-end security solutions while advancing security tooling and automation across teams.

You will collaborate with engineering to enable fast, secure delivery and respond to vulnerabilities via bug bounty programs, all while keeping customer data secure and resilient.