Product Security Engineer: Secure-by-Design & AI Focus

Asana; Warsaw (IN); Hybrid; USD 89,000 - 103,000; Full time

Benefits offered by this job

Health insurance with dental andTravel

Breakfast and lunch catering

Vacation allowance

Career growth budget

Home office setup budget

Gym/Fitness card

Fertility healthcare and family-form‑

Mental Health Support

Group life insurance

MacBooks with accessories

Job summary

Asana is seeking a Product Security Engineer to join our Product Security team in Warsaw. You’ll partner with product and infrastructure teams to design and ship secure software, building secure-by-default frameworks and scaling security coverage across web, mobile, and AI-powered surfaces.

This role is based in Warsaw with an office-centric hybrid schedule; in-office days are Monday, Tuesday, and Thursday, with some work-from-home on Wednesdays and Fridays depending on the role.

Qualifications

• 5+ years in application or product security
• Strong software engineering background in Python, JS/TS, or Scala
• Deep knowledge of OWASP Top 10 and common web flaws
• Experience with SAST/DAST, SCA, and vulnerability management tools
• Ability to perform security design reviews and threat modeling for complex applications

Responsibilities

• Partner with product and engineering teams to bake security into the SDLC.
• Conduct security architecture reviews and threat modeling.
• Develop and maintain secure-by-default frameworks and libraries.
• Build automated security tooling to scale coverage.
• Identify AI-specific security risks and abuse-resistant design.
• Triage and drive remediation of vulnerabilities from bug bounty and testing.
• Influence engineering roadmaps by communicating security constraints.
• Investigate product security incidents and contain analysis.
• Improve software supply chain security and third-party risk.
• Educate engineers on secure coding practices.

Skills

Python

JavaScript/TypeScript

Scala

Security architecture

Threat modeling

Code review

SAST/DAST

OWASP Top 10

AI/ML security

Communication skills

Job description

Asana is seeking a Product Security Engineer to join our Product Security team in Warsaw. You’ll partner with product and infrastructure teams to design and ship secure software, building secure-by-default frameworks and scaling security coverage across web, mobile, and AI-powered surfaces.

This role is based in Warsaw with an office-centric hybrid schedule; in-office days are Monday, Tuesday, and Thursday, with some work-from-home on Wednesdays and Fridays depending on the role.