Remote Product Security Engineer — Secure by Default AI

CyberJob; Canada (KY); Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Healthcare for you and family

Parental leave

401k matching

Competitive equity

Wellness stipends

Commuter benefits (remote US)

Job summary

WorkOS is seeking a security-focused engineer to lead secure design with engineering teams, and to perform offensive security testing across our products. You will shape security by default and help reduce risk while partnering with developers to implement pragmatic mitigations.

As part of the Security team, you will advance tooling, conduct tests, and engage with customers on security-related inquiries, ensuring the enterprise-grade protection customers expect.

Qualifications

• 5+ years of experience in security engineering or security-focused software engineering.
• Experience with security assessments, penetration testing, and responsible disclosure.
• Familiarity with industry tooling.
• Proven ability to identify vulnerabilities (e.g., CVEs, bug bounties).
• Strong written and verbal communication, especially with engineering teams.
• Comfort reading and writing code and leveraging AI.
• Bonus: Experience in the authentication and identity domain.
• Bonus: Production-level code experience developing security features.

Responsibilities

• Lead secure design efforts with engineering teams on secure design and code reviews.
• Build secure by default systems and reduce risk for engineers.
• Perform offensive security testing including penetration tests and code audits.
• Improve security tooling including static analysis and vulnerability management.
• Operate the responsible disclosure program and coordinate remediation.
• Improve products by remediating vulnerabilities in production systems.
• Work directly with customers to address security questions and concerns.

Skills

Security engineering

Penetration testing

Code reviews

Vulnerability management

AI tooling

Security tooling integration

Security assessments

Communication

Tools

Static analysis tools

SAST/DAST tooling

CI/CD security

Job description

WorkOS is seeking a security-focused engineer to lead secure design with engineering teams, and to perform offensive security testing across our products. You will shape security by default and help reduce risk while partnering with developers to implement pragmatic mitigations.

As part of the Security team, you will advance tooling, conduct tests, and engage with customers on security-related inquiries, ensuring the enterprise-grade protection customers expect.