Remote Product Security Engineer - Secure by Default, Scale Fast

Rozgoo; United States; À distance; USD 140 000 - 210 000; Plein temps

Avantages offerts par ce poste

Fully Remote

ESOP

Tech Allowance

Health Benefits

Annual Off-Sites

Flexible Work

Professional Development

Résumé du poste

Supabase is seeking a Product Security Engineer to strengthen security across products, platform, and engineering workflows. You’ll work with engineers and leadership to reduce risk early in development and ship securely by default.

You’ll identify gaps, conduct threat modeling and design reviews, and mature a developer-first security program while balancing risk and velocity. This remote role supports a global?team and security incident response.

Qualifications

• Strong experience in product security, application security, or security engineering.
• Familiarity with cloud-native, developer tools, SaaS, platform, or infrastructure products.
• Ability to communicate clearly in written and asynchronous environments.
• Understanding of authentication, session management, APIs and secrets handling.
• Experience with vulnerability triage, responsible disclosure, or security incident response.

Responsabilités

• Identify and close gaps across application security, secure design review, and vulnerability management.
• Conduct threat modeling, secure design reviews, and code reviews to identify remediation paths.
• Partner with engineering teams to provide product-focused security expertise.
• Mature security thinking in a developer-first environment with pragmatic judgment.
• Help triage and coordinate remediation for product and platform security issues.
• Participate in security on-call rotations and support incident response.

Connaissances

Product security

Application security

Security engineering

Threat modeling

Dev tooling

Outils

PostgreSQL

Kubernetes

Description du poste

Supabase is seeking a Product Security Engineer to strengthen security across products, platform, and engineering workflows. You’ll work with engineers and leadership to reduce risk early in development and ship securely by default.

You’ll identify gaps, conduct threat modeling and design reviews, and mature a developer-first security program while balancing risk and velocity. This remote role supports a global?team and security incident response.