Product Security Engineer - Hybrid, Remote

Haleos, Inc.; Austin (TX); Hybrid; USD 130,000 - 190,000; Full time

Benefits offered by this job

Remote-friendly work environment

Equity package

Health, dental, and vision insurance

401(k) with company match

Flexible PTO policy

Job summary

Haleos, Inc. in Austin, TX is seeking a Product Security Engineer to secure the application layer across web, desktop, and mobile platforms.

You will design security controls and authentication schemes for a fast-growing AI-powered suite, balancing strong protection with a seamless user experience. You will conduct security assessments, implement CSP, XSS/CSRF protections, review code for security, and shape secure development guidelines for frontend and backend teams.

Qualifications

• 4+ years of experience in application security, product security, or software security engineering.
• Strong understanding of web application security (OWASP Top 10, CSP, SOP, CORS).
• Experience securing modern web frameworks (React, Next.js, Vue, or similar).
• Experience with secure authentication flows, token management, and session security.
• Knowledge of API security from the client perspective, including secure API consumption.
• Understanding of mobile and desktop application security principles.
• Experience with security testing tools (Burp Suite, OWASP ZAP, or similar).
• Ability to perform code reviews with security focus.
• Strong knowledge of cryptography and secure data handling in client applications.

Responsibilities

• Design and implement security controls for web, desktop, and mobile applications
• Build secure authentication and session management systems across multiple platforms
• Implement security measures for AI-powered features with real-time user interactions
• Design secure data handling for voice, text, and multi-modal AI interactions
• Build security controls for client-side data caching and offline functionality
• Conduct security assessments and penetration testing of application-layer components
• Implement content security policies, XSS prevention, and CSRF protection mechanisms
• Design secure communication protocols between client applications and backend services
• Build security monitoring for client-side threats and anomalous user behavior patterns
• Establish secure development guidelines for front-end and application developers
• Implement secure file upload, download, and document handling systems

Skills

Application security

OWASP Top 10

Secure authentication

API security

Security testing

Code reviews

Tools

Burp Suite

OWASP ZAP

Job description

Haleos, Inc. in Austin, TX is seeking a Product Security Engineer to secure the application layer across web, desktop, and mobile platforms.

You will design security controls and authentication schemes for a fast-growing AI-powered suite, balancing strong protection with a seamless user experience. You will conduct security assessments, implement CSP, XSS/CSRF protections, review code for security, and shape secure development guidelines for frontend and backend teams.