Senior Staff Product Security Engineer

Rippling; San Francisco (CA); On-site; USD 190,000 - 270,000; Full time

Benefits offered by this job

Equity

Benefits

Onsite three days a week

Job summary

Rippling in San Francisco is seeking a hands-on staff security engineer to lead the Product Security program. You will drive security across the development lifecycle and mentor engineers, shaping security priorities for the product.

You’ll build guardrails, tooling, and threat models, perform code reviews for critical changes, and collaborate with engineering to eliminate classes of vulnerabilities at scale. The team values collaboration and hands-on security leadership.

Qualifications

• 10+ years of experience in a product security role.
• Experience leading architectural changes or cross-team efforts to mitigate vulnerabilities.
• Deep understanding of securing web applications.
• Fluency in Python, React, and Django Rest Framework.
• Experience with manual source code review, and embedding security to code in production environments.
• Experience with deploying application security tools in the CI/CD pipeline.
• Experience with securing software development lifecycle including building programs that eliminate full classes of vulnerabilities.

Responsibilities

• Build guardrails and controls to eliminate full classes of vulnerabilities within the Rippling application
• Build security tooling and automations to help scale the Product Security team's practices
• Threat-model application designs and solutions and provide security assessments
• Audit source code and perform code review for critical application changes
• Mentor software engineering teams in security best practices
• Provide hands-on remediation guidance to development teams
• Review & establish software development practices that make security an essential part of the development process
• Develop / Integrate security into the Software Development Life Cycle

Skills

Product security

Python

React

Django Rest Framework

Code review

CI/CD security tooling

Threat modeling

Security in SDLC

Tools

CI/CD tooling

Job description

Rippling in San Francisco is seeking a hands-on staff security engineer to lead the Product Security program. You will drive security across the development lifecycle and mentor engineers, shaping security priorities for the product.

You’ll build guardrails, tooling, and threat models, perform code reviews for critical changes, and collaborate with engineering to eliminate classes of vulnerabilities at scale. The team values collaboration and hands-on security leadership.