Staff Product Security Engineer

Typeface • Palo Alto, CA

3d • $210,000 - $240,000 • Hybrid

About The Position

Typeface is hiring a Staff Product Security Engineer to help lead security for its core AI platform. The role embeds security into product design, development, and delivery, protecting enterprise customers’ brands, content, and data. The engineer will create frameworks, tooling, and secure-by-design practices that help teams ship safer software efficiently.

This is a hybrid role based in Palo Alto, California, with in-office collaboration three days per week. The stated base salary range is $210,000–$240,000, plus equity; actual compensation may vary based on level, experience, and skillset.

Requirements

• At least 10 years of experience in product security, application security, or software engineering, with a strong track record securing products at scale.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
• Deep knowledge of web application and API security, including the OWASP Top 10 and common vulnerability classes.
• Proven experience with threat modeling, secure architecture reviews, and hands-on code review.
• Strong programming skills in one or more languages such as Python, TypeScript/JavaScript, Go, or Java.
• Experience integrating security tooling into CI/CD pipelines and cloud-native environments such as AWS, Azure, or GCP.
• Excellent communication skills and ability to work independently and collaboratively.
• Experience supporting B2B or enterprise SaaS products.

Nice To Haves

• Background securing AI, LLM, or generative AI applications.
• Industry certifications such as OSCP, OSWE, GWAPT, or CSSLP.

Responsibilities

• Lead security design reviews and threat modeling for new features and core product experiences, from early architecture through production launch.
• Identify, triage, and drive remediation of vulnerabilities across web applications, APIs, and services.
• Build and scale development-lifecycle security tooling, including SAST, DAST, dependency scanning, and secrets detection in CI/CD.
• Assess and secure AI and generative AI features against risks such as prompt injection, data leakage, and model misuse.
• Conduct hands-on code reviews and penetration tests, and manage bug bounty and external testing programs.
• Collaborate with Product, Engineering, and Compliance partners to balance security, speed, and user experience.
• Create secure coding guidelines and training for engineers.
• Mentor and support engineers and help foster a security-first engineering culture.

Benefits

• Competitive compensation, including salary and equity.
• 401(k).
• Full medical, dental, and vision insurance for employees and their families.
• HSA and FSA options.
• Flexible time off, including parental leave.
• Well-being programs and resources supporting mental and physical health.
• Daily lunch and snacks.
• Mentorship and the opportunity to work closely with AI leaders on products that ship.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior