Staff Product Security Engineer - AI-Driven, Remote, High Impact

P2P; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Phantom is building an AI-native security team focused on securing our mobile, web, and backend products. This Staff-level role spans architecture, code review, testing, and production security, partnering with engineering to identify risks and implement practical controls.

You will lead security initiatives, shape patterns, and elevate security across Phantom’s platforms. The role is fully remote and open to candidates based in the US, UK and Canada, offering high impact work and ownership from

Responsibilities

• Product Security Ownership: Partner with engineering teams to identify and address security risks across Phantom's mobile applications, web products, APIs, and backend services.
• Architecture and Threat Modeling: Lead security reviews for new products and major architectural changes, with attention to authorization boundaries, data sensitivity, transaction integrity, key material, and third-party integrations.
• Secure Product Development: Embed practical security controls into the software development lifecycle, from design and implementation through testing, release, and production operation.
• Code Review and Security Testing: Perform AI assisted security code reviews and targeted testing of high-risk features.
• Security Tooling: Develop tooling that gives engineers fast, actionable security feedback with automation and AI-assisted workflows.
• Software Supply Chain Security: Harden CI/CD, build, and release systems against supply chain threats.
• Vulnerability Management: Triage findings and drive remediation with owners.
• Incident Response: Support investigations and turn lessons into durable improvements.
• Technical Leadership: Establish product security patterns and lead cross-functional initiatives.

Skills

Security engineering

Threat modeling

Code review

AI-assisted security

Leadership

Job description

Phantom is building an AI-native security team focused on securing our mobile, web, and backend products. This Staff-level role spans architecture, code review, testing, and production security, partnering with engineering to identify risks and implement practical controls.

You will lead security initiatives, shape patterns, and elevate security across Phantom’s platforms. The role is fully remote and open to candidates based in the US, UK and Canada, offering high impact work and ownership from