Product Security Engineer - Secure by Default, Remote

Kos Ai; San Francisco (CA); Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

401k matching

Competitive equity

Healthcare, dental and vision

Job summary

WorkOS’s Security team secures data and identities for hundreds of millions of users, partnering with engineering on secure design and rapid risk reduction. We balance offensive testing with pragmatic mitigations and collaborate to make secure development the easiest path for engineers.

The team embraces AI to scale security across products, while maintaining a strong focus on customer trust. We seek experienced security engineers who read code, write secure software, and can operate across

Qualifications

• 5+ years in security engineering or security-focused software engineering.
• Ability to execute across security functions: assessments, pen testing, responsible disclosure, tooling integration.
• Familiarity with common industry tooling.
• Proven ability to identify vulnerabilities (CVEs, bug bounty, etc.).
• Strong written and verbal communication, especially with engineering teams.
• Comfort reading/writing code and leveraging AI in security work.
• Bonus: authentication/identity domain experience.
• Bonus: production-grade secure coding experience.

Responsibilities

• Lead secure design efforts with engineering teams.
• Build secure-by-default systems and reduce risk across pipelines.
• Perform offensive security testing and code audits.
• Improve security tooling and integrations across engineering pipelines.
• Operate and improve the responsible disclosure program.
• Remediate vulnerabilities in production to improve security posture.
• Engage directly with customers on security questions and concerns.

Skills

Risk-focused

Pragmatic security

Security collaboration

AI enthusiasm

Curiosity and humility

Tools

Static analysis tools

Vulnerability management

Supply chain security

Job description

WorkOS’s Security team secures data and identities for hundreds of millions of users, partnering with engineering on secure design and rapid risk reduction. We balance offensive testing with pragmatic mitigations and collaborate to make secure development the easiest path for engineers.

The team embraces AI to scale security across products, while maintaining a strong focus on customer trust. We seek experienced security engineers who read code, write secure software, and can operate across