Staff Product Security Engineer

Typeface • Palo Alto, CA

2d • Hybrid

About The Position

Typeface is seeking a Staff Product Security Engineer to help lead security for its core AI platform. The role embeds security throughout product design, development, and release, protecting enterprise customers’ brands, content, and data. The engineer will build frameworks, tooling, and secure-by-design practices that help teams ship products safely and efficiently, and will help shape a security-first engineering culture.

Requirements

• 10+ years of experience in product security, application security, or software engineering, with a strong record of securing products at scale.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
• Deep knowledge of web application and API security, including the OWASP Top 10 and common vulnerability classes.
• Proven experience with threat modeling, secure architecture reviews, and hands-on code review.
• Strong programming skills in one or more languages such as Python, TypeScript/JavaScript, Go, or Java.
• Experience integrating security tooling into CI/CD pipelines and cloud-native environments such as AWS, Azure, or GCP.
• Excellent communication skills and the ability to work independently and collaboratively.
• Experience supporting B2B or enterprise SaaS products.

Nice To Haves

• Background securing AI, LLM, or generative AI applications.
• Industry certifications such as OSCP, OSWE, GWAPT, or CSSLP.

Responsibilities

• Lead security design reviews and threat modeling for new features and core product experiences, from early architecture through production launch.
• Identify, triage, and drive remediation of vulnerabilities across web applications, APIs, and services.
• Build and scale development-lifecycle security tooling, including SAST, DAST, dependency scanning, and secrets detection in CI/CD.
• Assess and secure AI and generative AI features against risks such as prompt injection, data leakage, and model misuse.
• Conduct hands-on code reviews and penetration tests, and manage bug bounty and external testing programs.
• Collaborate with Product, Engineering, and Compliance partners to balance security, delivery speed, and user experience.
• Create secure coding guidelines and training for engineering teams.
• Mentor and support engineers and help shape a strong security-first engineering culture.

Benefits

• Competitive compensation, including salary and equity.
• 401(k).
• Full medical, dental, and vision insurance for employees and their families.
• HSA and FSA options.
• Flexible time off, including parental leave.
• Well-being programs and resources supporting mental and physical health.
• Daily lunch and snacks.
• Mentorship and the opportunity to work closely with AI leaders on shipped products.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior