Security Engineer

Warp•New York, NY

6d•$230,000 - $290,000

About The Position

Warp is seeking a dedicated Product Security Engineer to be the first member of its product security function. This role will own the technical direction of product and application security, focusing on building secure products, making strategic security investments for enterprise customers, and effectively responding to product-security issues. The position requires a blend of security expertise and software engineering skills, with approximately half of the time dedicated to hands-on software engineering, including designing and building security features, improving security architecture, and creating systems to facilitate secure development practices for all engineers at Warp.

Requirements

5+ years of software engineering experience, including meaningful experience in product security, application security, or software security - ideally in a fast-paced startup environment.
Strong software engineering fundamentals and the ability to personally design, build, and ship production systems. This is not primarily a security-review or advisory role.
Deep knowledge of application-security fundamentals including authentication and authorization, data protection, vulnerability classes, threat modeling, secure architecture, and incident response.
Strong product judgment: you can translate security risks and customer requirements into pragmatic product and engineering decisions rather than treating security as an end in itself.
Strong organizational skills and an exceptional eye for detail; you catch things before they become problems.
Clear, thoughtful communicator who can adjust tone for candidates, interviewers, and leadership alike.
Comfortable with ambiguity and change - you default to figuring it out, not waiting to be told.

Nice To Haves

Experience as an early security hire or member of a small product-security team, particularly at a developer-tool or enterprise SaaS company.
Experience working directly with enterprise customers, sales engineers, or customer security teams on security architecture and requirements.
Experience securing AI or agentic systems, particularly around untrusted code execution, sandboxing/isolation, secrets and credentials, permissions, or access to customer data.
Experience building security-related product features or developer-facing security systems, rather than exclusively internal security tooling.
Experience leading response to significant application vulnerabilities or security incidents.

Responsibilities

Shape Warp's product security strategy, identifying the highest-leverage security risks and opportunities as our product and enterprise business grow.
Design and build security-critical product capabilities, working directly in the codebase alongside product engineers.
Make security scalable across engineering through secure-by-default architecture, reusable systems and tooling, threat modeling, and pragmatic guidance—not by becoming a gatekeeper for every change.
Serve as Warp's product-security expert with customers, partnering with Product, Sales, and engineering leadership to understand enterprise requirements and communicate our security posture credibly.
Lead application-security incident response, from assessing vulnerabilities and coordinating mitigations through customer communication and systemic follow-up.
Develop Warp's approach to emerging AI and agent security risks, including areas like permissions, credentials, untrusted code execution, data boundaries, and isolation.