Product Security Engineer - Remote

Kos Ai; Marion, Northern (KS, KY); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

401k matching

Competitive equity

Healthcare, dental and vision coverage

Paid time off and holidays

Parental leave

Wellness stipend

Gym membership/fitness stipend

Commuter benefits for hybrid

Job summary

WorkOS is seeking a Senior Security Engineer to lead secure design and guard our platform used by AI-enabled products. You will work closely with engineering to implement secure-by-default systems and perform offensive security testing, code audits, and vulnerability remediation.

You will also improve security tooling, manage responsible disclosure and engage with customers on security questions. This role is remote in the US, with strong collaboration across teams and a culture of risk-aware

Qualifications

• 5+ years in a security engineering or security-focused software role.
• Experience across security assessments, penetration testing, responsible disclosure, and tooling integration.
• Familiarity with common industry security tooling.
• Proven ability to identify vulnerabilities (CVEs, bug bounty, or prior work).
• Strong written and verbal communication with engineering teams.
• Comfort reading and writing code and leveraging AI in security work.

Responsibilities

• Lead secure design efforts with engineering teams.
• Build secure-by-default systems to reduce risk.
• Perform offensive security testing and code audits.
• Improve security tooling across pipelines.
• Operate a responsible disclosure program.
• Remediate vulnerabilities to improve product security.
• Engage with customers on security questions.

Skills

Security engineering

Penetration testing

Vulnerability management

Code reviews

Threat modeling

CI/CD security

AI for security

Communication

Tools

Static analysis tools

Software composition analysis

Bug bounty platforms

Job description

WorkOS is seeking a Senior Security Engineer to lead secure design and guard our platform used by AI-enabled products. You will work closely with engineering to implement secure-by-default systems and perform offensive security testing, code audits, and vulnerability remediation.

You will also improve security tooling, manage responsible disclosure and engage with customers on security questions. This role is remote in the US, with strong collaboration across teams and a culture of risk-aware