Product Security Engineer

You will own encryption, key management, signing, data protection, storage encryption, and tenant isolation. You will embed secure defaults into the development lifecycle, lead threat modeling, improve scanning and CI enforcement, and translate security standards into production implementation.

Responsibilities

• Own encryption, key management, BYOK, envelope encryption, and signing systems
• Extend PHI and PII scrubbing and data-protection foundations
• Own encryption at rest and tenant isolation
• Maintain secure-by-default templates and reference implementations in the SDLC
• Lead platform threat modeling
• Improve security scanning coverage, signal, and CI enforcement
• Translate audit, compliance, and incident-response requirements into code

Requirements

• 4+ years building security-critical production systems
• Cryptography and key-management experience, including encryption, KMS, secrets handling, and signing
• Secure architecture experience
• Multi-tenant SaaS isolation experience
• Python, TypeScript, and Node.js secure-coding skills
• CI/CD security checks and gates experience

Benefits

• Equity