Lead Product Security Engineer – AI-Scale Security

Tools-For-Humanity; San Francisco (CA); On-site; USD 293,000 - 325,000; Full time

Benefits offered by this job

Healthcare

Dental

Vision

401(k) plan and match

Life insurance

Flexible time off

Commuter benefits

Professional development stipend

Much more

Job summary

Tools for Humanity is seeking a Product Security Engineer to drive the security of the World project across architecture, code, and infrastructure. You’ll embed security into the full development lifecycle, leading with first-principles thinking to solve complex challenges at global scale.

You will own vulnerability management, build automated guardrails, and scale the Secure SDLC, influencing engineering teams and safeguarding users’ trust in a rapidly growing organization.

Qualifications

• 6+ years of hands-on experience in Product Security or Application Security.
• Experience building and operating security automation pipelines using AI agents for vulnerability detection, triage, code review and remediation.
• Proficient in code review and development in Rust, Go, and Python.
• Extensive experience securing modern AWS architectures and developing secure infrastructure-as-code (Terraform and CDK).
• Ability to assess exploitability and prioritize security risks and explain practical tradeoffs to engineering teams.
• Strong background in implementing and managing security tooling (SAST, DAST, SCA) and embedding security into CI/CD pipelines.
• Deep understanding of web and API security principles (OWASP Top 10) and securing distributed, mobile-first systems.

Responsibilities

• Lead secure architecture reviews and threat modeling sessions for new applications and services.
• Build and operate security automation pipelines using AI agents to scale vulnerability detection & triage, code review, and remediation.
• Engineer and implement automated security guardrails and reusable tools to make the secure path the easy path for developers.
• Perform deep-dive, security-focused code and infrastructure reviews in Rust, Go, and Python.
• Own the vulnerability management process, from triaging bug bounty submissions to remediation with engineering teams.
• Mature and scale our Secure SDLC and bug bounty programs to keep pace with a growing engineering org.

Skills

Threat modeling

Security automation

Code review

AWS security

CI/CD security

OWASP Top 10

Mobile security

Tools

Terraform

CDK

SAST

DAST

SCA

Job description

Tools for Humanity is seeking a Product Security Engineer to drive the security of the World project across architecture, code, and infrastructure. You’ll embed security into the full development lifecycle, leading with first-principles thinking to solve complex challenges at global scale.

You will own vulnerability management, build automated guardrails, and scale the Secure SDLC, influencing engineering teams and safeguarding users’ trust in a rapidly growing organization.