Member of Technical Staff, Product Security

Parallel Web Systems•Bay Area, CA

1d•$150,000 - $300,000•Onsite

About The Position

You will build and operate the security systems that let Parallel ship quickly without creating avoidable risk. You will work across application security, secure defaults, AI-assisted security tooling, and the unique attack surface of agentic systems that consume untrusted web content. You will fix real vulnerabilities when they appear, then change the underlying systems so the same class of issue is harder to introduce again. You will also help define how security fits into the development process: building reusable patterns for authentication, authorization, data handling, and outbound access, designing controls for enterprise customers, and ensuring security review happens as part of how software gets built rather than as a separate process at the end.

Requirements

Deep intuition on application security, software architecture, and how vulnerabilities emerge in real systems
Comfortable finding issues yourself, but care more about eliminating vulnerability classes through better libraries, frameworks, and defaults
Like to write production code
Strong opinions on where current AI models are useful for security work and where they mostly create noise
Comfortable operating independently
Prioritize the highest-leverage problems
Work directly with both engineers and customers
Significant software engineering experience, including several years focused on product or application security
Strong experience with web and API security, including authentication, authorization, SSRF, IDOR, injection, and multi-tenant isolation
Built frameworks, libraries, or secure defaults that reduced entire classes of vulnerabilities across a codebase or engineering organization
Experience building security tooling using current AI models, such as automated code review, threat modeling, triage, agent harnesses, or evaluation systems
Experience securing systems that process untrusted inputs, especially LLM or agentic systems
Ability to work independently as the primary security owner and make clear prioritization decisions
Strong production coding skills in Python, Go, TypeScript, or similar languages

Nice To Haves

Experience with GCP
Experience with Kubernetes
Experience with security research
Experience with open source security tooling
Experience giving conference talks

Responsibilities

Build and operate security systems
Work across application security, secure defaults, AI-assisted security tooling, and the unique attack surface of agentic systems that consume untrusted web content
Fix real vulnerabilities when they appear
Change underlying systems to prevent similar vulnerabilities
Help define how security fits into the development process
Build reusable patterns for authentication, authorization, data handling, and outbound access
Design controls for enterprise customers
Ensure security review is part of the software development process