Remote Product Security Engineer for AI-Driven Systems

Superhuman; San Francisco (CA); Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health care

Disability insurance

RRSP matching

Parental leave

Paid time off

Job summary

Superhuman is building the AI-native future of work with a family of products to think, write, and get things done faster. As a Product Security Engineer you will help move fast securely, building identity models, guardrails, and secure-by-default platforms for our engineers and AI systems.

You will collaborate with product engineering across the SDLC, run threat modeling, design reviews, and secure code reviews, while advancing our security tooling and bug bounty program to keep customer data

Qualifications

• 5+ years of experience securing applications at scale.
• Experience across threat modeling, design reviews, secure code reviews, and web app pentesting.
• Familiarity with the standard Product Security tool suite: SAST, DAST, and SCA.
• Experience managing vulnerability disclosure programs on platforms such as HackerOne or Bugcrowd.

Responsibilities

• Collaborate with Product Engineering throughout the SDLC to identify vulnerabilities.
• Develop end-to-end security solutions to mitigate risks across the product suite.
• Improve Product Security tooling, automation, and bug bounty programs.
• Experiment with AI-based tools to enable the Security team to move faster.
• Be the voice of customers, communicating security risks across engineering teams.

Skills

Threat modeling

Secure code reviews

Web app pentesting

Security tooling

Bug bounty platforms

AI for security

Tools

SAST

DAST

SCA

HackerOne

Bugcrowd

Job description

Superhuman is building the AI-native future of work with a family of products to think, write, and get things done faster. As a Product Security Engineer you will help move fast securely, building identity models, guardrails, and secure-by-default platforms for our engineers and AI systems.

You will collaborate with product engineering across the SDLC, run threat modeling, design reviews, and secure code reviews, while advancing our security tooling and bug bounty program to keep customer data