Senior Product Security Engineer — Platform & AI Security

Skylight; United States; Remote; USD 200,000 - 250,000; Full time

Benefits offered by this job

401K matching

Wellness budget

Home-office budget

Health, Dental & Vision

Job summary

Skylight is seeking a hands-on Security Engineer to own the day-to-day product security program across our cloud backend, mobile apps, and Android platform. You’ll triage vulnerabilities, drive remediation, run our bug bounty, and partner with product and engineering on design reviews.

With 6+ years in application security and strong engineering chops, you’ll implement AI security scanning, refine threat models for new features, lead security incident responses, and help shape a secure product

Qualifications

• 6+ years in applications or product security with software eng background.
• Proven ability to ship production code and fix security issues.
• Experience securing backend services and APIs (OAuth/OIDC, MFA, token handling).

Responsibilities

• Own vulnerability management end-to-end across Backend, Mobile, and Android teams.
• Lead AI security scanning development and CI integration.
• Run HackerOne bug bounty program: triage, validate, payouts.
• Manage third-party pen tests from scoping to remediation.
• Lead security design reviews and threat modeling for new features.

Skills

Security leadership

6+ years experience

Software engineering

OAuth 2.0/OIDC

PKCE

MFA

Bug bounty

AI/LLM security

Threat modeling

Clear communication

Education

Bachelor's in CS or related

Tools

HackerOne

Static analysis tools

CI integrations

Custom scanners

Job description

Skylight is seeking a hands-on Security Engineer to own the day-to-day product security program across our cloud backend, mobile apps, and Android platform. You’ll triage vulnerabilities, drive remediation, run our bug bounty, and partner with product and engineering on design reviews.

With 6+ years in application security and strong engineering chops, you’ll implement AI security scanning, refine threat models for new features, lead security incident responses, and help shape a secure product