Senior Product Security Engineer - Encryption & Data Protection

Stack Ai; United States; On-site; USD 180,000 - 230,000; Full time

Job summary

StackAI is seeking a hands-on Senior Product Security Engineer to design, build, and harden the secure architecture at the core of our AI workflow platform. You will own encryption, key management, data protection, and secure-by-default SDLC templates, partnering with Core engineering to scale secure systems as the platform grows.

You will lead threat modeling, harden the architecture across cloud and on-prem deployments, and push CI/CD security checks deeper into our pipelines to prevent

Qualifications

• 4+ years building security-critical production systems.
• Practical depth in cryptography, key management, and signing.
• Ability to design secure systems and argue with peers as a senior engineer.
• Experience with multi-tenant SaaS data isolation.
• Strong secure-coding skills in Python and TypeScript/Node.js.
• Ability to wire security checks into CI/CD pipelines.

Responsibilities

• Own encryption and signing: manage KMS, BYOK, envelope encryption, and signing pipelines across cloud/on-prem.
• Protect sensitive customer data by extending PHI/PII scrubbing and data-protection foundations.
• Secure the storage layer: encryption at rest and tenant isolation.
• Maintain secure-by-default templates and SDLC reference implementations.
• Threat-model the platform across execution engine, connectors, and multi-tenant boundaries.
• Improve tooling: expand coverage, signals, and CI enforcement to prevent production findings.
• Act as technical point of contact for security standards and compliance in code.

Skills

Security engineering

Cryptography

KMS

Secrets handling

Threat modeling

Secure coding

Python backend

TypeScript/Node.js

CI/CD security

Multi-tenant isolation

Job description

StackAI is seeking a hands-on Senior Product Security Engineer to design, build, and harden the secure architecture at the core of our AI workflow platform. You will own encryption, key management, data protection, and secure-by-default SDLC templates, partnering with Core engineering to scale secure systems as the platform grows.

You will lead threat modeling, harden the architecture across cloud and on-prem deployments, and push CI/CD security checks deeper into our pipelines to prevent