Product Security Engineer

Superhuman

3d • $227,000 - $310,000 • Hybrid

About The Position

Superhuman is building an AI-native productivity platform and seeks a Product Security Engineer to help make secure product development the default while teams move quickly. The role focuses on establishing identity models, guardrails, and secure-by-default platform capabilities, as well as addressing AI and product security challenges, automating routine security work, and enabling engineers to build securely.

The engineer will partner with Product Engineering throughout the software development lifecycle, identify and mitigate risks across the product suite, improve security tooling and automation, and develop AI-based tools for the Security team. The role also involves communicating security risks and trade-offs with engineering stakeholders while protecting customer data. The position follows a dynamic hybrid model, and candidates may be based remotely; travel may be expected during scheduled team collaboration weeks, with in-person time determined by managers based on business needs.

Requirements

• At least 5 years of relevant experience securing applications at scale.
• Experience across secure SDLC touchpoints, including threat modeling, design reviews, secure code reviews, and web application penetration testing.
• Familiarity with standard Product Security tools, including SAST, DAST, and SCA.
• Experience using AI to solve security challenges at scale.
• Software engineering or programming experience in at least one language, such as Java, Python, JavaScript, or Go.
• Experience managing vulnerability disclosure programs or conducting security research on bug bounty platforms such as HackerOne or Bugcrowd.
• Ability to think like an adversary to identify risks and build engineering solutions to mitigate them.
• Ability to work independently with minimal guidance, proactively manage tasks and priorities across multiple projects, execute efficiently, collaborate across functions, and thrive in fast-paced, results-driven environments.

Responsibilities

• Collaborate with Product Engineering teams throughout the SDLC by creating threat models, conducting design reviews and secure code reviews, and performing manual testing to identify vulnerabilities.
• Develop and implement end-to-end security solutions to mitigate risks across the product suite.
• Drive improvements to Product Security tooling, automation, and the bug bounty program.
• Experiment with and develop AI-based tools to help the Security team work more efficiently.
• Represent customer interests by engaging engineering stakeholders and communicating security risks and trade-offs while keeping customer data secure.

Benefits

• Competitive pay.
• Medical, dental, vision, mental health, and fertility benefits.
• Disability and life insurance options.
• 401(k) and RRSP matching.
• Paid parental leave.
• 20 days of paid time off per year, 12 paid holidays per year, two floating holidays per year, and flexible sick time.
• Stipends, including for caregiving, pet care, wellness, and home office needs.
• Annual professional development budget and opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed