Product Security Engineer

Zoomcar; Seattle (WA); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Excellent health care

Disability and life insurance

401(k) and RRSP matching

Paid parental leave

Paid time off and holidays

Job summary

Superhuman is seeking a Product Security Engineer to help secure our AI-native platform. You will work with Product Engineering across the SDLC to build threat models, perform design reviews, secure code reviews, and manual testing to identify vulnerabilities.

You will develop end-to-end security solutions, improve tooling and bug bounty programs, and explore AI-based security tools while communicating risks clearly to stakeholders and protecting customer data.

Qualifications

• 3+ years of relevant security engineering experience securing apps at scale.
• Experience with threat modeling, design reviews, secure code reviews, and web app pentesting.
• Familiarity with SAST, DAST, and SCA tools.
• Experience using AI to solve security challenges at scale.
• Software engineering in Java, Python, JavaScript, or Go.
• Experience with vulnerability disclosure programs (HackerOne or Bugcrowd).
• Ability to think like an adversary and mitigate risks.
• Proven ability to work independently in fast-paced environments.

Responsibilities

• Collaborate with Product Engineering across the SDLC, creating threat models and conducting design reviews, secure code reviews, and testing to identify vulnerabilities.
• Develop and implement end-to-end security solutions to mitigate risks across the product suite.
• Drive improvements across security tooling, automation, and bug bounty programs.

Skills

Threat modeling

Secure SDLC

AI in security

Programming (Java, Python, JS, Go)

Vulnerability disclosure programs

Independent cross-functional work

Tools

SAST

DAST

SCA

Job description

Superhuman offers a dynamic hybrid working model for this role. This flexible approach gives team members the best of both worlds: plenty of focus time along with in-person collaboration that helps foster trust, innovation, and a strong team culture.

About Superhuman

Grammarly is now part of Superhuman, the AI productivity platform on a mission to unlock the superhuman potential in everyone. The Superhuman suite of apps and agents brings AI wherever people work, integrating with over 1 million applications and websites. The company’s products include Grammarly’s writing assistance, Superhuman Docs's collaborative workspaces, Mail’s inbox management, and Go, the proactive AI assistant that understands context and delivers help automatically. Founded in 2009, Superhuman empowers over 40 million people, 50,000 organizations, and 3,000 educational institutions worldwide to eliminate busywork and focus on what matters. Learn more at superhuman.com and about our values here.

The Opportunity

Superhuman is building the AI-native future of work: a family of products people and companies rely on to think, write, and get things done faster. We ship AI features and agents at a pace that makes security one of the most interesting problems in the building, and we're looking for a Product Security Engineer to help us solve it. Your job won't be to slow us down; it will be to make moving fast the safe default. You will be building the identity model, guardrails, and secure-by-default platform that lets our engineers and AI systems operate boldly. You'll work on bleeding-edge AI and product security problems: securing AI agents and applications, automating KTLO and toil work away, and empowering our engineers to build quickly and securely because the safe path is the default path.

As a Product Security Engineer, you will:

• Collaborate with Product Engineering teams throughout the SDLC, creating Threat Models, conducting Design Reviews, Secure Code Reviews, and manual testing to identify vulnerabilities.
• Develop and implement end-to-end security solutions to mitigate risks across our product suite.
• Help drive improvements across our Product Security tooling, automation, and bug bounty program.
• Experiment with and develop AI-based tools to enable the Security team to move even faster.
• Be the voice of our customers, actively engaging stakeholders across engineering teams, communicating security risks and trade-offs while keeping customer data secure.

Qualifications

• Has 3+ years of relevant experience in securing applications at scale.
• Experience working at each touchpoint in a secure SDLC: threat modeling, design reviews, secure code reviews, and web app pentesting.
• Familiarity with the standard Product Security tool suite: SAST, DAST, and SCA.
• Experience with using AI to solve Security challenges at scale.
• Software engineering or programming experience in at least one language, such as Java, Python, JavaScript, or Go.
• Experience managing vulnerability disclosure programs or conducting security research on bug bounty platforms such as HackerOne or Bugcrowd.
• The ability to think like an adversary to identify risk, and then build like an engineer to mitigate those risks.
• Has a demonstrated ability to work independently with minimal guidance, proactively manages tasks and priorities across multiple projects, analyzes and executes work efficiently, collaborates effectively with cross-functional teams, and thrives in fast-paced, results-driven environments.

Compensation and Benefits

Superhuman offers all team members competitive pay along with a benefits package encompassing the following and more:

• Excellent health care (including a wide range of medical, dental, vision, mental health, and fertility benefits)
• Disability and life insurance options
• 401(k) and RRSP matching
• Paid parental leave
• 20 days of paid time off per year, 12 days of paid holidays per year, two floating holidays per year, and flexible sick time
• Generous stipends (including those for caregiving, pet care, wellness, your home office, and more)
• Annual professional development budget and opportunities

Superhuman takes a market-based approach to compensation, so base pay may vary by location. Our US locations are categorized into two compensation zones based on proximity to our hub locations.

Base pay may vary considerably depending on job-related knowledge, skills, and experience. The expected salary ranges for this position are outlined below by compensation zone and may be modified in the future.

We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, ancestry, national origin, citizenship, age, marital status, veteran status, disability status, political belief, or any other characteristic protected by law. Superhuman is an equal opportunity employer and a participant in the US federal E-Verify program (US). We also abide by the Employment Equity Act (Canada).