Staff Product Security Engineer

Code Red Partners; San Francisco (CA); Hybrid; USD 235,000 - 275,000; Full time

Job summary

A leading recruitment firm is seeking a Staff Product Security Engineer for a FinTech company in San Francisco. This is a foundational role within a small, high-impact security organization. Responsibilities include advocating for security best practices, leading secure code reviews, and mentoring team members. The ideal candidate will have 8-10+ years of experience in AppSec and strong coding proficiency.

Qualifications

• 8-10+ years of experience in AppSec and/or Product Security.
• Ability to read/write and reason in production-level code.
• Ability to commute hybrid (3x/week) to downtown SF.

Responsibilities

• Educate and advocate for security architecture best practices.
• Own application security E2E as a hands-on, build-focused engineer.
• Lead secure code reviews, threat modeling, and architecture-level risk assessments.
• Build tooling and automation to scale AppSec across the org.
• Manage 3rd-party security reviews and pentesting.
• Mentor and grow into a Tech Lead role for the AppSec and Security team.

Skills

Experience in AppSec and/or Product Security

Strong coding proficiency

Hands-on familiarity with cloud platforms (GCP or AWS)

Experience in fast-paced startup environments

Clear communicator

CS degree or related STEM field

Education

CS degree or related STEM field

Job description

Code Red is partnered with a unicorn FinTech in SF to bring on a Staff Product Security Engineer. This will be a foundational hire within a small, high‑impact security org that supports a global organization in hypergrowth mode.

Base Pay Range

$235,000.00/yr - $275,000.00/yr

Additional Compensation Types

RSUs, Direct message the job poster from Code Red Partners

What you’ll do:

• Sit embedded with Product & Engineering to educate and advocate for security architecture best practices, enabling rapid, secure releases
• Own application security E2E as a hands‑on, build‑focused engineer
• Lead secure code reviews, threat modeling, architecture‑level risk assessments
• Build tooling and automation to scale AppSec across the org
• Manage 3rd‑party security reviews and pentesting
• Mentor, guide and grow into a Tech Lead role for the AppSec and Security team

What you’ll bring:

• 8‑10+ years of experience, with expertise in AppSec and/or Product Security
• Strong coding proficiency (ability to read/write and reason in production‑level code)
• Hands‑on familiarity with cloud platforms (GCP or AWS preferred)
• Experience in fast‑paced startup environments; proven ability to operate in ambiguous environments
• Clear communicator – ability to explain complex security concepts to engineers and non‑technical stakeholders
• CS degree (or related STEM field) from a well‑recognized university
• Ability to commute hybrid (3x/week) to downtown SF

Who you are:

• Pragmatic balance of speed and rigor; curious, humble, collaborative
• Excited to be part of a high‑momentum, startup environment that embraces innovation

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Engineering and Information Technology

Industries

Technology, Information and Media, Information Services, and Financial Services