Product Security Engineer - AI-Sec & Threat Modeling

Zoomcar; Seattle (WA); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Excellent health care

Disability and life insurance

401(k) and RRSP matching

Paid parental leave

Paid time off and holidays

Job summary

Superhuman is seeking a Product Security Engineer to help secure our AI-native platform. You will work with Product Engineering across the SDLC to build threat models, perform design reviews, secure code reviews, and manual testing to identify vulnerabilities.

You will develop end-to-end security solutions, improve tooling and bug bounty programs, and explore AI-based security tools while communicating risks clearly to stakeholders and protecting customer data.

Qualifications

• 3+ years of relevant security engineering experience securing apps at scale.
• Experience with threat modeling, design reviews, secure code reviews, and web app pentesting.
• Familiarity with SAST, DAST, and SCA tools.
• Experience using AI to solve security challenges at scale.
• Software engineering in Java, Python, JavaScript, or Go.
• Experience with vulnerability disclosure programs (HackerOne or Bugcrowd).
• Ability to think like an adversary and mitigate risks.
• Proven ability to work independently in fast-paced environments.

Responsibilities

• Collaborate with Product Engineering across the SDLC, creating threat models and conducting design reviews, secure code reviews, and testing to identify vulnerabilities.
• Develop and implement end-to-end security solutions to mitigate risks across the product suite.
• Drive improvements across security tooling, automation, and bug bounty programs.

Skills

Threat modeling

Secure SDLC

AI in security

Programming (Java, Python, JS, Go)

Vulnerability disclosure programs

Independent cross-functional work

Tools

SAST

DAST

SCA

Job description

Superhuman is seeking a Product Security Engineer to help secure our AI-native platform. You will work with Product Engineering across the SDLC to build threat models, perform design reviews, secure code reviews, and manual testing to identify vulnerabilities.

You will develop end-to-end security solutions, improve tooling and bug bounty programs, and explore AI-based security tools while communicating risks clearly to stakeholders and protecting customer data.