Senior or Staff Product Security Engineer
New
S
SkylightTechnology
United StatesFull-TimeSenior
Salary$200K-250K per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 6+ years
- Required Skills
- CI/CDSoftware Engineering
Requirements
- 6+ years of experience in application or product security.
- Strong software engineering background with the ability to ship production code.
- Deep experience securing backend services and APIs, including OAuth 2.0/OIDC, PKCE, and MFA.
- Experience with session management and token handling.
- Experience building and maintaining security tooling and automation, including static analysis and CI integrations.
- Comfort working with LLM-based systems.
- Hands-on experience running or triaging a bug bounty program.
- Proven track record of influencing engineering teams to prioritize and fix security issues.
- Clear written communication skills with the ability to explain risk to non-technical stakeholders.
Responsibilities
- Own the vulnerability management pipeline end to end, including intake, triage, and driving fixes to closure.
- Join the Platform pod to write and ship security fixes directly in codebases.
- Own and evolve the AI security scanning and verification pipeline.
- Run the HackerOne bug bounty program, managing triage and vendor relationships.
- Manage third-party penetration testing engagements from scoping through remediation.
- Lead security design reviews and threat modeling for new product features.
- Review and advise on device and firmware security work.
- Provide metrics and data on security findings and remediation for leadership reporting.
- Serve as a subject matter expert during product security incidents.
View Full Description & ApplyYou'll be redirected to the employer's site
