Staff Product Security Engineer: Build & Scale Secure Apps

Rippling; San Francisco (CA); On-site; USD 189,000 - 315,000; Full time

Job summary

Rippling is seeking a hands-on staff security engineer to help build and lead Rippling's Product Security program. You’ll own critical security initiatives, mentor engineers, and shape security practices across the development lifecycle.

The role focuses on securing Rippling’s applications, integrating security into SDLC, and collaborating with Engineering to defend our vast ecosystem. A strong security mindset and hands-on execution are essential.

Qualifications

• 10+ years of experience in a product security role.
• Experience leading architectural changes or cross-team efforts to mitigate security vulnerabilities.
• Deep understanding of securing web applications.
• Fluency in Python, React, and Django Rest Framework.
• Experience with manual source code review, and embedding security to code in production environments.
• Experience with deploying application security tools in the CI/CD pipeline.
• Experience with securing software development lifecycle including building programs that eliminate full classes of vulnerabilities.

Responsibilities

• Build guardrails and controls to eliminate full classes of vulnerabilities within the Rippling application.
• Build security tooling and automations to help scale the Product Security team’s practices.
• Threat-model application designs and solutions and provide security assessments.
• Audit source code and perform code review for critical application changes.
• Mentor software engineering teams in security best practices.
• Provide hands-on remediation guidance to development teams.
• Review & establish software development practices that make security an essential part of the development process.
• Develop / Integrate security into the Software Development Life Cycle.

Skills

Security engineering

Architectural changes

Web security

Python

React

Django REST Framework

Code review

Job description

Rippling is seeking a hands-on staff security engineer to help build and lead Rippling's Product Security program. You’ll own critical security initiatives, mentor engineers, and shape security practices across the development lifecycle.

The role focuses on securing Rippling’s applications, integrating security into SDLC, and collaborating with Engineering to defend our vast ecosystem. A strong security mindset and hands-on execution are essential.