Senior Product Security Engineer - Encryption Core

StackAI; San Francisco (CA); On-site; USD 248,000 - 282,000; Full time

Job summary

StackAI in San Francisco is seeking a hands-on (Senior) Product Security Engineer to design, build, and harden the secure architecture at the core of the no-code AI workflow platform. You will own encryption, key management, data protection, and secure-by-default patterns, collaborating with core engineers to scale security as the platform grows.

In this role you’ll work on PHI/PII scrubbing, storage encryption, tenant isolation, and threat modeling using modern tooling.

Qualifications

• 4+ years building security-critical systems in production.
• Experience with cryptography, key management, encryption, and signing in real systems.
• Secure architecture judgment to design and reason about secure systems.
• Multi-tenant SaaS isolation experience with data isolation guarantees.
• Strong secure-coding skills in Python and TypeScript/Node.js.
• Wiring security checks and gates into CI/CD so security is enforced automatically.

Responsibilities

• Own encryption and signing; manage KMS, envelope encryption, and signing pipelines.
• Protect customer data; extend PHI/PII scrubbing and strengthen data-protection foundations.
• Secure the storage layer; own encryption at rest and tenant isolation.
• Maintain secure-by-default templates and reference implementations embedded in our SDLC.
• Threat-model the platform across seams; lead AI-assisted threat-modeling tooling.
• Improve tooling; expand scanning, signals, and CI enforcement.
• Translate audit, compliance, and incident-response requirements into real codebase implementations.

Skills

Security engineering

Cryptography

Key management

Secure coding

CI/CD security

Multi-tenant isolation

Python

TypeScript/Node.js

Job description

StackAI in San Francisco is seeking a hands-on (Senior) Product Security Engineer to design, build, and harden the secure architecture at the core of the no-code AI workflow platform. You will own encryption, key management, data protection, and secure-by-default patterns, collaborating with core engineers to scale security as the platform grows.

In this role you’ll work on PHI/PII scrubbing, storage encryption, tenant isolation, and threat modeling using modern tooling.