Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Product Security Engineer (AI): Building secure-by-default frameworks, automated security tooling, and defenses for Asana's web, mobile, and AI-powered product surfaces with an accent on application security, threat modeling, and software supply chain protection. Focus on identifying AI-specific risks, scaling SAST/DAST coverage, investigating vulnerabilities and incidents, and partnering with engineering teams on secure design decisions.
Location: Vancouver, Canada, with an office-centric hybrid schedule; standard in-office days are Monday, Tuesday, and Thursday. Most employees may work from home on Wednesdays, while Friday arrangements depend on the role.
Base salary: 176,000–200,000 CAD annually, plus possible equity and benefits.
Company
Asana is a platform for human and AI collaboration used by millions of teams worldwide.
What you will do
- Partner with product and engineering teams throughout the software development lifecycle to build security into products and the platform.
- Perform security architecture reviews, threat modeling, code reviews, design reviews, and roadmap reviews.
- Develop secure-by-default frameworks and libraries that help engineers build secure systems.
- Build automated security tooling, including SAST/DAST checks, static and dynamic analysis rules, and automated red-teaming.
- Investigate AI-specific risks such as prompt injection, insecure tool permissions, and agentic attack surfaces.
- Triage vulnerabilities and security incidents, improve software supply chain security, and deliver secure coding training.
Requirements
- 5+ years of experience in application security, product security, or security-focused software engineering.
- Strong software engineering experience with Python, JavaScript/TypeScript, or Scala.
- Deep knowledge of the OWASP Top 10 and web vulnerabilities including XSS, CSRF, SSRF, and SQL injection.
- Familiarity with AI/ML security, LLM-specific risks, SAST/DAST, software composition analysis, and vulnerability management.
- Experience with security design reviews and threat modeling for complex applications.
- Strong communication, pragmatic collaboration, and a focus on defending against real-world attacks.
Nice to have
- Curiosity about AI tools and emerging technologies, with willingness to use them to improve productivity and decision-making.
Culture & Benefits
- Office-centric culture with hybrid work options.
- Mental health, wellness, and fitness benefits.
- Career coaching and support.
- Inclusive family-building benefits.
- Long-term savings or retirement plans and in-office culinary options.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →