Product Security Engineer (AI)

Location: Warsaw, Poland. Office-centric hybrid schedule with in-office days on Monday, Tuesday, and Thursday; working from home is generally available on Wednesdays, while Friday arrangements depend on the work.

Base salary: 31,000–36,000 PLN gross per month, plus potential equity and other compensation components.

Company

Asana provides a platform for human and AI collaboration used by millions of teams worldwide.

What you will do

• Partner with product and engineering teams across the software development lifecycle to build security into products and the platform.
• Conduct security architecture reviews, threat modeling, design reviews, and code reviews for features and services.
• Develop secure-by-default frameworks, libraries, and automated security tooling, including SAST, DAST, and automated red-teaming.
• Identify and address AI security risks such as prompt injection, insecure tool permissions, and agentic attack surfaces.
• Triage vulnerabilities, investigate product security incidents, and drive remediation using testing, monitoring, and vulnerability management tools.
• Improve software supply chain security, communicate security trade-offs, deliver secure-coding training, and shape risk-management strategies.

Requirements

• 5+ years of experience in application security, product security, or software engineering with a security focus.
• Strong software engineering background with Python, JavaScript/TypeScript, or Scala.
• Deep knowledge of the OWASP Top 10 and web vulnerabilities including XSS, CSRF, SSRF, and SQL injection.
• Familiarity with AI/ML security, including prompt injection and agentic attack surfaces.
• Experience with SAST, DAST, SCA, vulnerability management, security design reviews, and threat modeling.
• Strong communication skills and a pragmatic, collaborative approach to working with technical and non-technical partners.

Culture & Benefits

• Contract of Employment in Poland, with an option for 50% tax-deductible author’s rights costs where applicable.
• Health insurance with dental and travel coverage, group life insurance, and mental health support.
• Vacation allowance, career growth budget, and home office setup budget.
• Breakfast and lunch catering on office days, gym or fitness card, and fertility and family-forming support.
• MacBook with necessary accessories and an office-centric hybrid work environment.