Senior Product Security Engineer — AI‑Native SaaS

Theory Ventures; San Francisco, Northern (CA, KY); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Meaningful equity

Health, dental, and vision coverage

401(k) plan

Flexible time off

Job summary

BackOps is seeking a Product Security Engineer to own the security of the product end to end. You will work with engineering and infrastructure on how our systems get built and run, writing fixes and shipping guardrails that keep engineers secure by design.

This hands-on role is the first dedicated product security hire, so you will build the security program while doing the work, including enterprise security reviews and threat modeling for the agent platform.

Qualifications

• 5+ years in product or application security engineering, or a software engineer who moved into security and stayed hands-on.
• Strong coding skills in Python, Go, TypeScript, or similar. You review real code and write the fix yourself.
• Deep experience with authentication, authorization, and multi-tenant isolation: OAuth/OIDC, RBAC, tokens, sessions, etc.

Responsibilities

• Own product security end to end: authentication, authorization, multi-tenant isolation, APIs, and data models.
• Threat model the agent platform and define boundaries for what agents can do in customer systems.
• Build secure development lifecycle including design review, code review standards, and CI scanning with triage path.
• Run application vulnerability management end to end: find, prioritize, fix, verify.

Skills

Python

Go

TypeScript

OAuth/OIDC

Threat modeling

CI security tooling

Communication

Tools

SAST

DAST

SCA

Secrets scanning

Job description

BackOps is seeking a Product Security Engineer to own the security of the product end to end. You will work with engineering and infrastructure on how our systems get built and run, writing fixes and shipping guardrails that keep engineers secure by design.

This hands-on role is the first dedicated product security hire, so you will build the security program while doing the work, including enterprise security reviews and threat modeling for the agent platform.