Senior Product Security Engineer – AI & Cloud Security

Skylight; San Francisco (CA); Presencial; USD 200 000 - 250 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive Salary + Equity Package

401K matching

Wellness, learning, and home-officeBud

Health, Dental & Vision Plans

Unlimited PTO

Company holidays on the first Friday

Resumo da oferta

Skylight seeks a security-focused professional to own the day-to-day execution of our product security program across our cloud backend, mobile apps, and Android platform. You will triage and drive remediation of vulnerabilities, run our bug bounty program, and partner with product and engineering on design reviews before new features ship.

You will work closely with the Head of Security and be the go-to hands-on security expert for engineering teams, shipping fixes when needed and evolving our

Qualificações

• Experience leading vulnerability management across Backend, Mobile and Android platforms.
• Experience running bug bounty programs and vendor management.
• Experience conducting security design reviews and threat modeling for new features.
• Experience responding to product security incidents and post-incident analysis.

Responsabilidades

• Own vulnerability management end-to-end: intake, triage, remediation, and closure across Backend, Mobile, and Android.
• Collaborate with Platform pod to write and ship security fixes in codebases.
• Evolve AI security scanning; reduce false positives and integrate into CI.
• Run HackerOne program: triage reports, validate findings, decide payouts, manage vendor relations.
• Manage third‑party penetration testing engagements from scoping to remediation.
• Lead security design reviews and threat modeling for features including AI/LLM, and data handling for children.
• Review device and firmware security work with the firmware team.
• Provide metrics on findings, remediation, and SLA adherence for leadership reporting.
• Serve as SME during product security incidents.

Conhecimentos

Vulnerability management

Bug bounty

Threat modeling

Incident response

Security audits

Ferramentas

HackerOne

Descrição da oferta de emprego

Skylight seeks a security-focused professional to own the day-to-day execution of our product security program across our cloud backend, mobile apps, and Android platform. You will triage and drive remediation of vulnerabilities, run our bug bounty program, and partner with product and engineering on design reviews before new features ship.

You will work closely with the Head of Security and be the go-to hands-on security expert for engineering teams, shipping fixes when needed and evolving our