Platform Engineer, Product Security

Menlo Ventures; United States; Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Equity + RSUs/ISOs terms

Health, dental, vision (US)

401(k) with match

Paid parental leave

Flexible time off

Office meals, commuter benefits, SF.re

High-spec laptop & gear

Team events & off-sites

Job summary

Wispr is building a trusted voice interface platform. The role focuses on securing Flow, protecting user data, and defending against DDoS and breaches as the product scales across devices.

You will work on threat modeling, system-wide defenses, and embedding security into the product from day one. The team values pragmatic risk decisions and cross-functional collaboration.

Qualifications

• Ability to decompile code and identify vulnerabilities.
• Strong opinions on tradeoffs and pragmatic about battles.
• Concern for user journey alongside threat model.

Responsibilities

• Own product security end to end, prioritizing threats and architecting defenses.
• Get into new surfaces early — design reviews where the design is still changing.
• Build security into the platform so the safe path is the easy one.
• Make the whole team better at this, without becoming the person everyone waits on.

Skills

decompile code

threat modeling

design reviews

pragmatic security

Tools

Python

FastAPI

WorkOS

Supabase

AWS

Terraform

Gitleaks

Job description

About Wispr

We're building the first voice interface a billion people use every day.

Our first product, Flow, lets you talk instead of type anywhere on your computer or phone, and turns messy speech into polished text that is ready to send. It's scaled from $2M $50M in ARR in under 12 months with millions of users and thousands of enterprise customers. How we think

The team is still small enough that every person shapes what gets built.

About the Role

People tell Flow things they'd never type into a search box. Their medical questions, their legal drafts, the fight with their husband. We're on the screen while they work, we hear the whole sentence, and millions of users and thousands of enterprises have entrusted us with their most confidential professional and personal messages.

Wispr is built on a foundation of trust. Unlike most products, we carry a much deeper obligation to protect user data and build strong defenses against attacks and breaches.

Why this is hard: agentic AI engineering brings speed, and it can open gaping security holes just as fast. Securing the product and user data against DDoS and breaches is a constant effort as we scale from millions of users to hundreds of millions, across mobile, web, desktop, wearables and whatever comes next.

What You'll Do

• Own product security end to end, prioritizing threats and architecting defenses.

• Get into new surfaces early — design reviews where the design is still changing.

• Build security into the platform so the safe path is the easy one.

• Make the whole team better at this, without becoming the person everyone waits on.

This role is perfect for you if:

• You enjoy decompiling code and finding vulnerabilities.

• You have strong opinions about tradeoffs, and you're pragmatic about which battles matter.

• You care as much about the user journey as the threat model.

• You've naturally become the security person even though nobody asked you to.

• This job description excites you.

Tech stack: Python, FastAPI, WorkOS (SSO/SCIM), Supabase auth, AWS, Terraform, Gitleaks

Logistics

Location. About 60% of the team is in San Francisco and the rest are remote, mostly US-based.

• If you're in SF: you'll be in the office most days. We think the best work happens in person. Most of the team is here five days a week, and a few do three or four days depending on family or long commutes.

• If you're remote: we're open to remote for some roles. We fly remote teammates to SF for three to four days a month.

Visa sponsorship. We sponsor visas: H1B, O1, EB1, L1, STEM + OPT, and more. We can't successfully sponsor for every role and every candidate, but if we make you an offer we'll make every reasonable effort, and we retain an immigration law firm to help.

What we offer

We're a small, focused team that cares deeply about the quality of our work and the people we do it with. Here's what you can expect:

• Equity on employee-friendly terms, including early exercise and extended exercise windows with a combination of ISOS and RSUs. Ask us for more details!

• Health, dental and vision. We cover 100% of the premium on the Anthem Blue Cross Gold PPO, and 75% of premiums for dependents. (US)

• 401(k) with up to a 4% match. (US)

• 16 weeks of paid parental leave (12 weeks for non-birthing parent).

• Flexible time off and company holidays.

• All meals in the office, plus commuter benefits and relocation reimbursement if you’re moving to San Francisco.

• A high-spec laptop, monitor, and a whisper-friendly microphone.

• Regular team events and off-sites.

We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed. Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We’re designing how humans interact with AI, which makes representation even more important, and we strive to include a range of diverse perspectives on our team.

We are committed to ensuring a fair and accessible interview process. If you need any accommodations or adjustments, please let us know.