Staff Product Security Architect

Phantom; United States; On-site; USD 180,000 - 250,000; Full time

Job summary

Phantom is hiring for a hands-on Staff Security Engineer to protect mobile, web, and backend products. You will partner with engineering teams to identify risks, lead architecture reviews, and embed practical security controls across the SDLC.

You'll perform AI-assisted code reviews, develop tooling for rapid security feedback, and drive vulnerability remediation. This fully remote role invites candidates from the US, UK, and Canada, with global security impact.

Qualifications

• Experience securing mobile, web, and backend products.
• Experience with vulnerability management and incident response.
• Ability to lead cross-functional security initiatives.

Responsibilities

• Partner with engineering to identify and address security risks across Phantom's mobile applications, web products, APIs, and backend services.
• Lead security reviews for new products and major architectural changes, with attention to authorization, data, and third-party integrations.
• Embed practical security controls into the software development lifecycle, from design through testing and production.
• Perform AI-assisted security code reviews and targeted testing of high-risk features; build repeatable approaches to find vulnerabilities before production.
• Develop tooling that provides engineers fast, actionable security feedback with minimal friction; use automation and AI where it increases coverage or speed.
• Triage findings from internal testing, researchers, bug bounty submissions, and third-party assessments; drive remediation with owners.
• Support investigation of security incidents and turn lessons into durable improvements to architecture and standards.
• Establish product security patterns and expectations across engineering; lead cross-functional initiatives at staff level.

Skills

Security engineering

Threat modeling

Code review

Security testing

AI-driven security

Security tooling

Tools

CI/CD tooling

Job description

Phantom is hiring for a hands-on Staff Security Engineer to protect mobile, web, and backend products. You will partner with engineering teams to identify risks, lead architecture reviews, and embed practical security controls across the SDLC.

You'll perform AI-assisted code reviews, develop tooling for rapid security feedback, and drive vulnerability remediation. This fully remote role invites candidates from the US, UK, and Canada, with global security impact.