Product Security Engineer

The role

The Product Security Engineer will lead secure design efforts and partner with engineering teams. You will build secure by default systems, perform offensive security testing, and improve security tooling.

What you will do

• Lead secure design efforts and partner with engineering teams on code reviews.
• Identify and prioritize risks early in the product lifecycle.
• Develop paved paths to make secure development the easiest path for engineers.
• Conduct penetration tests and code audits on new and existing products.
• Integrate and improve static analysis, supply chain security, and vulnerability management.
• Operate and improve the responsible disclosure program.
• Write and ship code to remediate vulnerabilities in production systems.
• Engage directly with customers regarding security-related questions and concerns.

Required qualifications

• 5+ years of experience in a security engineering or security-focused software engineering role.
• Ability to execute across security functions such as security assessments, penetration testing, and responsible disclosure.
• Familiarity with and experience using common industry tooling.
• Proven ability to identify vulnerabilities in software through CVEs, bug bounty, blog posts, or prior work experience.
• Strong written and verbal communication skills.
• Comfortable reading and writing code.
• Able to effectively leverage AI during the process.

Nice to have

• Experience in the authentication and identity domain.
• Experience writing production level code, especially developing security features.

Benefits

• Healthcare coverage for you and your family, including medical, dental, and vision.
• Parental leave
• Paid-time off
• Fully remote working arrangements
• 401k matching
• Competitive Equity
• FSA, ST/LT Disability, Voluntary Life
• Carrot fertility benefits
• 20 days paid vacation + 10 holidays + unlimited sick leave
• 12 weeks fully paid parental leave
• Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active
• Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being

About the company

WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Their platform powers authentication, identity, authorization, and other critical infrastructure.