Назад
Company hidden
2 дня назад

Staff Product Security Engineer (AI)

210 000 - 240 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Staff Product Security Engineer (AI): Securing Typeface’s core AI platform and enterprise marketing products with an accent on threat modeling, secure architecture, vulnerability remediation, and AI application security. Focus on building CI/CD security tooling, assessing prompt injection and data leakage risks, conducting code reviews and penetration tests, and mentoring engineers.

Location: Hybrid role based in Palo Alto, California, with in-office collaboration 3 days a week.

Base salary: $210,000–$240,000 per year, plus equity. Actual compensation may vary based on level, experience, and skillset.

Company

hirify.global develops AI-powered marketing orchestration technology that helps enterprise brands create personalized campaigns.

What you will do

  • Lead security design reviews and threat modeling from early architecture through production launch.
  • Identify, triage, and drive remediation of vulnerabilities across web applications, APIs, and services.
  • Build and scale SAST, DAST, dependency scanning, and secrets detection in CI/CD.
  • Assess AI and generative AI features for prompt injection, data leakage, model misuse, and other emerging risks.
  • Conduct hands-on code reviews and penetration tests, and manage bug bounty and external testing programs.
  • Partner with Product, Engineering, and Compliance; create secure coding guidance and training; and mentor engineers.

Requirements

  • 10+ years of experience in product security, application security, or software engineering, with a strong track record of securing products at scale.
  • Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
  • Deep knowledge of web application and API security, including the OWASP Top 10 and common vulnerability classes.
  • Proven experience with threat modeling, secure architecture reviews, and hands-on code review.
  • Strong programming skills in one or more of Python, TypeScript/JavaScript, Go, or Java.
  • Experience integrating security tooling into CI/CD pipelines and cloud-native environments using AWS, Azure, or GCP.
  • Excellent communication skills and the ability to work independently and collaboratively.
  • Experience supporting B2B or enterprise SaaS products.

Nice to have

  • Experience securing AI, LLM, or generative AI applications.
  • Certifications such as OSCP, OSWE, GWAPT, or CSSLP.

Culture & Benefits

  • Salary, equity, and 401(k).
  • Medical, dental, and vision insurance for employees and families, with HSA and FSA options.
  • Flexible time off, including parental leave, and well-being programs.
  • Daily lunch and snacks.
  • Mentorship and collaboration with AI leaders and engineers from major technology companies.
  • Fast-growing startup environment focused on AI-powered marketing orchestration.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →