Product Security Engineer

The role

You will design, build, and harden secure architecture at the core of the product. You will write production code for encryption, key management, and customer data protection.

What you will do

• Own encryption and signing including KMS, key management, BYOK, envelope encryption, and signing pipeline.
• Protect sensitive customer data by extending PHI/PII scrubbing and strengthening data-protection foundations.
• Secure the storage layer including encryption at rest and tenant isolation.
• Maintain and expand secure-by-default templates and reference implementations in the SDLC.
• Lead threat modeling on system seams using AI-assisted threat-modeling tooling.
• Push scanning coverage, signal, and CI enforcement.
• Translate audit, compliance, and incident-response requirements into codebase implementation.

Required qualifications

• 4+ years building security-critical systems in production.
• Practical depth in cryptography and key management including encryption, KMS, secrets handling, and signing.
• Secure architecture judgment to design and reason about secure systems.
• Multi-tenant SaaS isolation experience.
• Strong secure-coding skills in Python and TypeScript/Node.js.
• Comfortable wiring security checks and gates into CI/CD.

Nice to have

• Cloud and API security fundamentals on GCP, Azure, or AWS.
• Securing on-prem, self-hosted, or air-gapped deployments.
• Experience in regulated domains (healthcare/PHI, finance, etc.).
• Familiarity with AI/LLM platform security: agent execution, connector trust boundaries, prompt and tool-call risk.
• Startup or growth-stage experience.

About the company

StackAI (by Asana) is a no-code AI workflow platform that empowers companies to build, deploy, and scale AI-powered workflows easily. It is an Asana Company building a foundational platform for the AI-driven future of work.