Product Security Engineer

🕒 August 6

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Fellow - AI Meeting Assistant

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

🤖 Artificial Intelligence

☁️ SaaS

🏢 Enterprise

💰 $24M Series A on 2021-11

Artificial Intelligence • SaaS • Enterprise

Fellow is an AI meeting assistant and secure note-taking platform that records, transcribes, and summarizes meetings across Zoom, Google Meet, Microsoft Teams, Slack huddles, and in-person sessions. Built with a privacy-first approach, Fellow emphasizes enterprise-grade security and governance (SOC 2 Type II, HIPAA, GDPR), never trains its AI on customer data, and offers granular controls like role-based access, zero-day retention, MNPI redaction, and exam-ready audit logs for regulated industries. The product includes an AI agent (AskFellow) to surface meeting insights, generate follow-ups and documents, and automate CRM and project-tool updates; it centralizes recordings and integrates with 50+ tools (Salesforce, HubSpot, Asana, Jira, Notion, Slack, etc. ). Fellow is positioned for enterprise and regulated teams—finance, legal, healthcare—seeking secure, centralized meeting intelligence.

📋 Description

• Identify the highest-leverage opportunities to strengthen Fellow’s security, define practical paths forward, and drive work across teams • Build on and evolve existing security systems and practices as the product, architecture, and threat landscape change • Partner with engineering teams to threat model features, review designs, and reduce risk before production • Perform security-focused code reviews and advise on authentication, authorization, data protection, input handling, secrets, and business logic • Build reusable security primitives, paved-road patterns, libraries, and platform controls • Introduce and improve security tooling including static analysis, dependency scanning, secret detection, infrastructure scanning, and CI/CD guardrails • Find, prioritize, and drive remediation of vulnerabilities from internal testing, automated tooling, penetration tests, customer reports, and external researchers • Contribute to security incident response, investigation, containment, root-cause analysis, and post-incident hardening • Help engineers build security judgment through practical guidance, shared learning, and collaboration • Evaluate AI-agent and AI-assisted-development security implications and build tools, controls, and workflows for safe use at scale

🎯 Requirements

• Professional experience in product security, application security, software engineering, infrastructure security, or a combination of these areas • Strong software engineering skills • Proficiency in at least one modern programming language, ideally Python • Experience identifying and remediating application vulnerabilities involving authentication, authorization, injection, data exposure, secrets, and business logic • Experience conducting threat models, security design reviews, and security-focused code reviews for production software • Ability to write code, build tooling, and help engineering teams implement durable solutions • Experience with SAST, SCA, DAST, secret scanning, cloud posture management, or infrastructure-as-code scanning • Familiarity with cloud infrastructure and security concepts including IAM, networking, containers, Kubernetes, and infrastructure as code • Track record of taking ambiguous, important problems from investigation through implementation and measurable improvement • Ability to operate with significant ownership and set direction within the area • Deep, practical use of AI coding agents such as Claude Code, Cursor, Codex, or similar tools • Track record of developing agentic workflows, tools, or practices that materially improve software development • Curiosity about emerging threats and commitment to continued learning • Nice to have: experience with penetration testing, offensive security, bug bounty programs, or external security researchers • Nice to have: experience securing AI-powered products, agentic systems, model integrations, or tools allowing AI systems to access data and take actions • Nice to have: security-community participation through research, open-source contributions, writing, or speaking

🏖️ Benefits

• Every employee receives stock options • Health and dental coverage, including prescription drugs and life insurance • 12 weeks of paid parental leave at 80% of salary • Three weeks of vacation • Paid sick leave • Paid company-wide break at the end of the year • Remote-first flexibility — Work remotely within Canada • Learning budgets • Lunch-and-learns • Freedom to own your work end to end • Optional office space in Ottawa, Montreal, and Toronto