Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Средняя
$210к-240к/год
$180к$220кмедиана$260к
По похожим ролям (50) ~ $220к/год
88
Хорошая вакансия
развернуть
Чётко описанная роль уровня Staff в безопасности AI-продукта, с зарплатой около рыночной медианы и долей в компании; главный компромисс - работа из офиса три дня в неделю.
Кликните для подробной информации
Офис три дняПонятная рольСовременный стекAI-направлениеЗарплата по рынкуПотенциал стартапа
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Staff Product Security Engineer (AI): Securing Typeface’s core AI platform and enterprise marketing products with an accent on threat modeling, secure architecture, vulnerability remediation, and AI application security. Focus on building CI/CD security tooling, assessing prompt injection and data leakage risks, conducting code reviews and penetration tests, and mentoring engineers.
Location: Hybrid role based in Palo Alto, California, with in-office collaboration 3 days a week.
Base salary: $210,000–$240,000 per year, plus equity. Actual compensation may vary based on level, experience, and skillset.
Lead security design reviews and threat modeling from early architecture through production launch.
Identify, triage, and drive remediation of vulnerabilities across web applications, APIs, and services.
Build and scale SAST, DAST, dependency scanning, and secrets detection in CI/CD.
Assess AI and generative AI features for prompt injection, data leakage, model misuse, and other emerging risks.
Conduct hands-on code reviews and penetration tests, and manage bug bounty and external testing programs.
Partner with Product, Engineering, and Compliance; create secure coding guidance and training; and mentor engineers.
Requirements
10+ years of experience in product security, application security, or software engineering, with a strong track record of securing products at scale.
Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
Deep knowledge of web application and API security, including the OWASP Top 10 and common vulnerability classes.
Proven experience with threat modeling, secure architecture reviews, and hands-on code review.
Strong programming skills in one or more of Python, TypeScript/JavaScript, Go, or Java.
Experience integrating security tooling into CI/CD pipelines and cloud-native environments using AWS, Azure, or GCP.
Excellent communication skills and the ability to work independently and collaboratively.
Experience supporting B2B or enterprise SaaS products.
Nice to have
Experience securing AI, LLM, or generative AI applications.
Certifications such as OSCP, OSWE, GWAPT, or CSSLP.
Culture & Benefits
Salary, equity, and 401(k).
Medical, dental, and vision insurance for employees and families, with HSA and FSA options.
Flexible time off, including parental leave, and well-being programs.
Daily lunch and snacks.
Mentorship and collaboration with AI leaders and engineers from major technology companies.
Fast-growing startup environment focused on AI-powered marketing orchestration.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →