Назад
5 дней назад

Product Security Engineer (AI)

176 000 - 200 000CAD
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Canada
Вакансия из списка Hirify.GlobalВакансия из Hirify RU Global, списка компаний с восточно-европейскими корнями
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Product Security Engineer (AI): Building secure-by-default frameworks, automated security tooling, and defenses for Asana's web, mobile, and AI-powered product surfaces with an accent on application security, threat modeling, and software supply chain protection. Focus on identifying AI-specific risks, scaling SAST/DAST coverage, investigating vulnerabilities and incidents, and partnering with engineering teams on secure design decisions.

Location: Vancouver, Canada, with an office-centric hybrid schedule; standard in-office days are Monday, Tuesday, and Thursday. Most employees may work from home on Wednesdays, while Friday arrangements depend on the role.

Base salary: 176,000–200,000 CAD annually, plus possible equity and benefits.

Company

Asana is a platform for human and AI collaboration used by millions of teams worldwide.

What you will do

  • Partner with product and engineering teams throughout the software development lifecycle to build security into products and the platform.
  • Perform security architecture reviews, threat modeling, code reviews, design reviews, and roadmap reviews.
  • Develop secure-by-default frameworks and libraries that help engineers build secure systems.
  • Build automated security tooling, including SAST/DAST checks, static and dynamic analysis rules, and automated red-teaming.
  • Investigate AI-specific risks such as prompt injection, insecure tool permissions, and agentic attack surfaces.
  • Triage vulnerabilities and security incidents, improve software supply chain security, and deliver secure coding training.

Requirements

  • 5+ years of experience in application security, product security, or security-focused software engineering.
  • Strong software engineering experience with Python, JavaScript/TypeScript, or Scala.
  • Deep knowledge of the OWASP Top 10 and web vulnerabilities including XSS, CSRF, SSRF, and SQL injection.
  • Familiarity with AI/ML security, LLM-specific risks, SAST/DAST, software composition analysis, and vulnerability management.
  • Experience with security design reviews and threat modeling for complex applications.
  • Strong communication, pragmatic collaboration, and a focus on defending against real-world attacks.

Nice to have

  • Curiosity about AI tools and emerging technologies, with willingness to use them to improve productivity and decision-making.

Culture & Benefits

  • Office-centric culture with hybrid work options.
  • Mental health, wellness, and fitness benefits.
  • Career coaching and support.
  • Inclusive family-building benefits.
  • Long-term savings or retirement plans and in-office culinary options.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →