Product Security Engineer - Global-Scale Security Architect

Tools for Humanity; San Francisco (CA); On-site; USD 293,000 - 325,000; Full time

Benefits offered by this job

Healthcare

Dental

Vision

401(k) plan and match

Life insurance

Flexible time off

Commuter benefits

Professional development stipend

Much more

Job summary

Tools for Humanity is seeking a hands-on Product Security Engineer to safeguard the World project. You will embed security into every development stage, drive threat modeling, and lead automated guardrails to make the secure path the easy path for engineers.

You will review code and infrastructure in Rust, Go, and Python, secure AWS architectures, and mature our Secure SDLC and bug bounty programs to scale with a growing engineering organization.

Qualifications

• 6+ years of hands-on experience in Product Security or Application Security.
• Experience building and operating security automation pipelines using AI agents for vulnerability detection, triage, code review, and remediation.
• Proficiency in code review and development in Rust, Go, and Python.
• Extensive experience securing modern AWS architectures and developing secure infrastructure-as-code (e.g., Terraform and CDK).
• Ability to assess exploitability, prioritize security risks, and explain practical tradeoffs to engineering teams.
• Strong background in implementing and managing security tooling (SAST, DAST, SCA) and embedding security into CI/CD pipelines.
• Deep understanding of web and API security principles (OWASP Top 10) and securing distributed, mobile-first systems.

Responsibilities

• Lead secure architecture reviews and threat modeling sessions for new applications and services.
• Build and operate security automation pipelines using AI agents to scale vulnerability detection, triage, code review, and remediation.
• Engineer and implement automated security guardrails and reusable tools to make the secure path the easiest for developers.
• Perform deep-dive security-focused code and infrastructure reviews in Rust, Go, and Python.
• Own the vulnerability management process, from triaging bug bounty submissions to driving remediation with engineering teams.
• Mature and scale Secure SDLC and bug bounty programs to match rapid engineering growth.

Skills

6+ years experience

AI-driven security pipelines

Rust/Go/Python

AWS security

security tooling (SAST/DAST/SCA)

CI/CD security

OWASP Top 10 security

Job description

Tools for Humanity is seeking a hands-on Product Security Engineer to safeguard the World project. You will embed security into every development stage, drive threat modeling, and lead automated guardrails to make the secure path the easy path for engineers.

You will review code and infrastructure in Rust, Go, and Python, secure AWS architectures, and mature our Secure SDLC and bug bounty programs to scale with a growing engineering organization.