Product Security Engineer

Superhuman is hiring a Product Security Engineer to help secure its AI-powered productivity products and enable teams to ship safely. The role focuses on embedding security throughout the software development lifecycle, building product security solutions and tooling, and applying AI to security work.

Responsibilities:

• Collaborate with Product Engineering teams throughout the SDLC, creating Threat Models, conducting Design Reviews, Secure Code Reviews, and manual testing to identify vulnerabilities
• Develop and implement end-to-end security solutions to mitigate risks across our product suite
• Help drive improvements across our Product Security tooling, automation, and bug bounty program
• Experiment with and develop AI-based tools to enable the Security team to move even faster
• Be the voice of our customers, actively engaging stakeholders across engineering teams, communicating security risks and trade-offs while keeping customer data secure

Requirements:

• Has 5+ years of relevant experience in securing applications at scale
• Experience working at each touchpoint in a secure SDLC: threat modeling, design reviews, secure code reviews, and web app pentesting
• Familiarity with the standard Product Security tool suite: SAST, DAST, and SCA
• Experience with using AI to solve Security challenges at scale
• Software engineering or programming experience in at least one language, such as Java, Python, JavaScript, or Go
• Experience managing vulnerability disclosure programs or conducting security research on bug bounty platforms such as HackerOne or Bugcrowd
• The ability to think like an adversary to identify risk, and then build like an engineer to mitigate those risks
• Has a demonstrated ability to work independently with minimal guidance, proactively manages tasks and priorities across multiple projects, analyzes and executes work efficiently, collaborates effectively with cross-functional teams, and thrives in fast-paced, results-driven environments