Product Security Engineer

🔥 16 hours ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

💵 $175k - $275k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 8%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

WorkOS

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

🔌 API

🏢 Enterprise

🤝 B2B

💰 $80M Series B - WorkOS on 2022-05

API • Enterprise • B2B

WorkOS is a developer-focused platform that provides APIs, SDKs, and hosted admin tools to help SaaS applications become enterprise-ready. It abstracts and normalizes enterprise integrations — including Single Sign-On (SAML/OIDC), SCIM/HRIS directory sync, multi-factor auth, role-based access control, audit logs, and encryption key management — so engineering teams can add enterprise features quickly with minimal custom work. WorkOS targets B2B SaaS companies selling to enterprise customers, offering developer-first docs, sample SDKs, and a hosted Admin Portal for IT admins.

📋 Description

• Partner with engineering teams on secure design and code reviews • Identify and prioritize security risks early in the product lifecycle • Develop paved paths and systems that make secure development the easiest path • Conduct penetration tests and code audits on new and existing products • Integrate and improve static analysis, supply chain security, and vulnerability management across engineering pipelines • Operate and automate the responsible disclosure program, validate submissions, and coordinate remediation • Write and ship production code to remediate vulnerabilities and improve product security posture • Engage directly with customers on security-related questions and concerns

🎯 Requirements

• 5+ years of experience in a security engineering or security-focused software engineering role • Ability to execute across security functions including security assessments, penetration testing, responsible disclosure, and security tooling integration • Familiarity with and experience using common industry tooling • Proven ability to identify software vulnerabilities, demonstrated through CVEs, bug bounty, blog posts, or prior work experience • Strong written and verbal communication skills, particularly when partnering with engineering teams • Comfortable reading and writing code • Able to effectively leverage AI during the process • Experience in authentication and identity domain (bonus) • Experience writing production-level code, especially developing security features (bonus) • Must be legally authorized to work in the United States • Benefits listed are US-only; compensation outside the US is adjusted based on local market benchmarks

🏖️ Benefits

• Equity • Healthcare, dental and vision coverage • FSA, ST/LT Disability, Voluntary Life • Carrot fertility benefits • 20 days paid vacation + 10 holidays + unlimited sick leave • 12 weeks fully paid parental leave • Monthly fitness stipend • Monthly wellness stipend • Commuter benefits for hybrid employees in SF/NYC • Unlimited token usage