Product Security Engineer

About the role

Persona builds identity verification infrastructure where security is integral to all aspects of development. Security failures can lead to system downtime and compromise user identities. This role combines product security with broader security responsibilities, focusing on building secure systems and shaping security practices across the organization.

Responsibilities

• Drive the full vulnerability lifecycle and response to external threats.
• Design and build autonomous systems and AI tools to scale security across teams and products.
• Partner with product engineers to ensure new features and systems are built securely.
• Shape Persona's presence in the security research community, managing the bug bounty program.

Requirements

• 4+ years of software engineering experience.
• 2+ years in product security.
• Experience translating security risks into product decisions with non-technical stakeholders.
• Proven ability to embed security practices into engineering teams' SDLCs.

Qualifications

• Familiarity with SAST/DAST tooling, dependency scanning, or bug bounty programs.
• Experience with compliance standards such as SOC 2, HIPAA, in a cloud-native environment.
• Experience building systems where data sensitivity is considered from the outset (e.g., HIPAA, financial data, identity).

Skills

• Strong understanding of security principles and practices.
• Experience with CI/CD pipelines and automated testing.
• Ability to communicate complex technical concepts to non-technical stakeholders.
• Knowledge of security frameworks and methodologies.

Benefits

• Medical, dental, and vision coverage.
• 3% 401(k) contribution.
• Unlimited paid time off.
• Quarterly mental health days.
• Family planning benefits.
• Professional development stipend.
• Wellness benefits.

Pay

Salary range: $150,000 - $200,000 annually, depending on experience.

Schedule

Full-time position based in San Francisco. Remote work is not currently available.