Senior Product Security Engineer — Encryption & SaaS Trust

StackAI; United States; On-site; USD 210,000 - 240,000; Full time

Job summary

StackAI is hiring a hands-on (Senior) Product Security Engineer to design, build, and harden the secure architecture at the core of the product, working as a technical partner to our Core engineering lead.

This is a hands-on engineering role. You'll write production code and own the security-critical systems the whole platform depends on: encryption and key management, customer data protection, and how security is built into the way every team ships.

Qualifications

• 4+ years building security-critical systems in production.
• Practical depth in cryptography and key management.
• Secure architecture judgment and ability to work with senior engineers.
• Multi-tenant SaaS isolation experience and data isolation guarantees.
• Strong secure-coding skills in Python and TypeScript/Node.js.
• CI/CD security checks and gates experience.

Responsibilities

• Own encryption and signing across KMS, BYOK, envelope encryption, and signing pipelines.
• Protect PHI/PII data and strengthen data-protection foundations.
• Own encryption at rest and tenant isolation in the storage layer.
• Maintain secure-by-default templates and reference implementations in the SDLC.
• Lead threat modeling across system boundaries and multi-tenant interfaces.
• Improve scanning coverage, signaling, and CI enforcement to prevent production findings.
• Translate audit, compliance, and incident-response requirements into code changes.

Skills

Security engineering

Cryptography

KMS

Secrets handling

Python

TypeScript/Node.js

CI/CD security

Threat modeling

Multi-tenant isolation

Job description

StackAI is hiring a hands-on (Senior) Product Security Engineer to design, build, and harden the secure architecture at the core of the product, working as a technical partner to our Core engineering lead.

This is a hands-on engineering role. You'll write production code and own the security-critical systems the whole platform depends on: encryption and key management, customer data protection, and how security is built into the way every team ships.