Product Security Engineer: Build Secure Tooling & Defenses

Cybersecurity Jobs; San Francisco (CA); Hybrid; USD 232,000 - 318,000; Full time

Benefits offered by this job

Comprehensive benefit plan

Hybrid work location

Job summary

Cybersecurity Jobs is seeking a hands-on Product Security Engineer in San Francisco to make secure outcomes the default across the codebase and delivery workflow. You will identify security gaps, build tooling, and lead threat modeling for new features.

You’ll review code, shape architectural security decisions, and drive AI-assisted security practices at scale. Hybrid work and a strong focus on practical security outcomes are offered.

Qualifications

• 5+ years of hands-on application security and security engineering experience.
• Ability to operate independently in a fast-moving environment.
• Communication style that makes security legible to engineers.
• Proven track record shipping security tooling or automation.
• Deep engineering capability to read, reason about, and review code.

Responsibilities

• Identify systemic security gaps in the codebase and engineering workflows and partner with teams to ship durable fixes.
• Build security tooling, automation, and code-level controls addressing vulnerability classes.
• Conduct in-depth code reviews and security design reviews for major initiatives.
• Drive threat modeling and security assessments for new features and translate requirements into guidance.
• Evolve security approach for AI-assisted development and impact on risk discovery at scale.
• Triaging and tracking vulnerabilities with product teams and contributing to pen testing/bug bounty programs.

Skills

TypeScript

Python

AppSec fundamentals

Threat modeling

Security tooling

Code review

Tools

Retool platform

SAST pipelines

Job description

Cybersecurity Jobs is seeking a hands-on Product Security Engineer in San Francisco to make secure outcomes the default across the codebase and delivery workflow. You will identify security gaps, build tooling, and lead threat modeling for new features.

You’ll review code, shape architectural security decisions, and drive AI-assisted security practices at scale. Hybrid work and a strong focus on practical security outcomes are offered.