Lead Product Security Engineer for Global Identity

World; San Francisco (CA); On-site; USD 293,000 - 325,000; Full time

Benefits offered by this job

Healthcare

Dental

401(k) plan and match

Life insurance

Flexible time off

Commuter benefits

Professional development stipend

Job summary

Tools for Humanity is seeking a hands-on Product Security Engineer to safeguard the World project. You will embed security into the development lifecycle, lead architecture reviews, and drive secure engineering across teams.

With 6+ years in product/security, you will prototype security automation, review code in Rust/Go/Python, and secure AWS deployments with IaC tools like Terraform and CDK, shaping a safe, scalable AI-enabled product.

Qualifications

• 6+ years of hands-on experience in Product Security or Application Security.
• Experience building security automation pipelines using AI agents for vulnerability detection, triage, code review, and remediation.
• Proficient in code review and development in languages like Rust, Go, and Python.
• Extensive experience securing AWS architectures and developing secure infrastructure-as-code (e.g., Terraform and CDK).
• Ability to assess exploitability, prioritize security risks, and explain practical tradeoffs to engineering teams.
• Strong background in implementing and managing security tooling (SAST, DAST, SCA) and embedding security into CI/CD pipelines.
• Deep understanding of web and API security principles (OWASP Top 10) and experience securing distributed, mobile-first systems.
• Nice to have: interest in securing mobile applications or smart contracts.

Responsibilities

• Lead secure architecture reviews and threat modeling sessions for new applications and services.
• Build and operate security automation pipelines using AI agents to scale vulnerability detection & triage, code review, and remediation.
• Engineer and implement automated security guardrails and reusable tools and libraries to make the secure path the easy path for developers.
• Perform deep-dive, security-focused code and infrastructure reviews in languages like Rust, Go, and Python.
• Own the vulnerability management process, from triaging bug bounty submissions to driving remediation efforts with engineering teams.
• Mature and scale our Secure SDLC and bug bounty programs to keep pace with a rapidly growing engineering organization.

Skills

Security engineering

AI security automation

Rust

Go

Python

AWS security

Infrastructure as code

Terraform

CDK

CI/CD security

SAST

DAST

SCA

OWASP Top 10

Mobile security

Smart contracts

Tools

Terraform

AWS

CDK

CI/CD tooling

Job description

Tools for Humanity is seeking a hands-on Product Security Engineer to safeguard the World project. You will embed security into the development lifecycle, lead architecture reviews, and drive secure engineering across teams.

With 6+ years in product/security, you will prototype security automation, review code in Rust/Go/Python, and secure AWS deployments with IaC tools like Terraform and CDK, shaping a safe, scalable AI-enabled product.