Product Security Engineer

Persona•San Francisco, CA

4h•Onsite

About The Position

Persona builds identity verification infrastructure where security isn't a layer we add later, it's core to everything we ship. When security fails at most companies, systems go down. At an identity verification company, real people's identities are compromised. As AI tooling expands what engineers can build and how fast they can build it, the attack surface grows with it. Someone proactively needs to own that problem.

Requirements

4+ years of software engineering experience
2+ years in product security
You've translated security risk into product decisions with non-technical stakeholders
You've embedded security into an eng team's SDLC without becoming the team that says no to everything

Nice To Haves

Familiarity with SAST/DAST tooling, dependency scanning, or bug bounty programs
Compliance experience (SOC 2, HIPAA) in a cloud-native environment
You've built systems where data sensitivity wasn't an afterthought — HIPAA, financial data, identity, etc.

Responsibilities

Drive the full vulnerability lifecycle and how Persona responds to external threats.
Design and build autonomous systems and AI tooling that scale security across every team and product
Partner with product engineers to shape how new features and systems get built securely
Shape Persona's presence in the security research community — running the bug bounty program that powers it