Product Security Engineer II

Strategy & foundations

• Build guardrails and AI-accelerated patterns that make secure-by-default the path of least resistance for developers.
• Build and maintain security tooling and automation that scales product security.
• Respond to emerging threats.

Design-time & review

• Contribute to threat modeling, design reviews, and code reviews with pragmatic guidance that balances risk against velocity.
• Partner with engineering to security-review and test new features and services as they're built.

Vulnerability management

• Triage, reproduce, and validate incoming bug bounty submissions and internal security reports.
• Cut through SAST, secrets, and vulnerability scanner noise to prioritize real issues and guide developers to effective fixes.
• Partner with development teams to drive remediation and track issues through closure.

Developer enablement

• Write clear, actionable security patterns that let developers ship fast and stay secure.
• Write and maintain runbooks, developer guidelines, and security documentation that scale the team's practices.
• Stay current on web and cloud security trends and bring new findings into product discussions.

• Hands-on experience with bug bounty platforms.
• Experience with cloud infrastructure security (AWS, GCP, Azure) and container technologies.
• Participation in CTF events or open-source security projects.
• Familiarity with threat modeling frameworks and secure SDLC best practices.
• Interest in contributing to internal developer security training programs.