Product Security Engineer (AI-Native) — End-to-End Security

BackOps; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary

Equity

Health, dental, and vision

401(k) plan

Flexible time off

Office meals

Job summary

BackOps is seeking a hands-on Product Security Engineer to own the security of our agent-driven platform from end to end. You will work with engineering and product to design, implement, and ship guardrails that keep customer environments safe as we scale.

You will deeply understand authentication, authorization, and multi-tenant isolation, and you will drive the secure development lifecycle across the organization, including vulnerability management and security reviews for enterprise deals.

Qualifications

• 5+ years in product or application security engineering, or a software engineer who moved into security and stayed hands-on.
• Strong coding skills in Python, Go, TypeScript, or similar; you review real code and fix it yourself.
• Experience with authentication, authorization, and multi-tenant isolation in complex systems.

Responsibilities

• Own the security of the BackOps product end to end, including authentication, authorization, multi-tenant isolation, APIs, and data models.
• Threat model the agent platform and define boundaries for agent actions within customer systems.
• Build and advocate a secure development lifecycle with design reviews, code reviews, and CI scanning processes.
• Lead vulnerability management from identification to remediation and verification.
• Define and enforce security controls for AI-assisted code and for on-prem deployments.

Skills

Product security

Security engineering

Python

Go

TypeScript

Tools

SAST

DAST

SCA

Secrets scanning

Job description

BackOps is seeking a hands-on Product Security Engineer to own the security of our agent-driven platform from end to end. You will work with engineering and product to design, implement, and ship guardrails that keep customer environments safe as we scale.

You will deeply understand authentication, authorization, and multi-tenant isolation, and you will drive the secure development lifecycle across the organization, including vulnerability management and security reviews for enterprise deals.