Product Security Engineer - AI-Driven, Secure-by-Default

Superhuman; United States; Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health care

Disability and life insurance

401(k) and RRSP matching

Parental leave

20 days paid time off

12 paid holidays

Two floating holidays

Flexible sick time

Caregiving stipend

Pet care stipend

Wellness stipend

Home office stipend

Annual professional development budget

Job summary

Superhuman seeks a Product Security Engineer to advance secure-by-default platforms and build identity models and guardrails for fast, safe execution.

You will collaborate with Product Engineering teams to create threat models, conduct design reviews, perform secure code reviews, and run manual testing across the SDLC. You’ll drive end-to-end security solutions and contribute to tooling, automation, bug bounty programs, and AI-based security experiments.

Qualifications

• 5+ years securing applications at scale.
• Experience with threat modeling and design reviews.
• Secure code reviews and web app pentesting.
• Familiarity with SAST/DAST/SCA tools and AI in security.

Responsibilities

• Collaborate with Product Engineering teams across the SDLC to create threat models and conduct design reviews.
• Develop end-to-end security solutions to mitigate risks across the product suite.
• Improve Product Security tooling, automation, and bug bounty programs, and explore AI-based security tools.

Skills

Threat modeling

Design reviews

Secure code reviews

Web app pentesting

SAST

DAST

SCA tools

AI in security

Security at scale

Tools

SAST tools

DAST tools

SCA tools

Job description

Superhuman seeks a Product Security Engineer to advance secure-by-default platforms and build identity models and guardrails for fast, safe execution.

You will collaborate with Product Engineering teams to create threat models, conduct design reviews, perform secure code reviews, and run manual testing across the SDLC. You’ll drive end-to-end security solutions and contribute to tooling, automation, bug bounty programs, and AI-based security experiments.