Senior Product Security Engineer

About the role

Persona builds identity verification infrastructure where security is integral to every aspect of what we do. Security failures can lead to system downtime and compromise real people's identities. With the expansion of AI tools, the attack surface grows, necessitating proactive security ownership.

Responsibilities

• Drive the full vulnerability lifecycle and response to external threats.
• Design and build autonomous systems and AI tooling to scale security across teams and products.
• Partner with product engineers to ensure new features and systems are built securely.
• Shape Persona's presence in the security research community, managing the bug bounty program.

Requirements

• 6+ years of software engineering experience.
• 3+ years in product security.
• Experience translating security risks into product decisions with non-technical stakeholders.
• Proven ability to embed security practices into engineering teams' SDLCs.

Qualifications

• Familiarity with SAST/DAST tooling, dependency scanning, or bug bounty programs.
• Experience in compliance areas such as SOC 2, HIPAA, in a cloud-native environment.
• Experience building systems where data sensitivity was a critical consideration, e.g., HIPAA, financial data, identity.

Skills

• Strong understanding of security principles and practices.
• Experience with CI/CD pipelines and automated testing.
• Excellent communication and collaboration skills.
• Ability to work independently and as part of a team.

Benefits

• Medical, dental, and vision coverage.
• 3% 401(k) contribution.
• Unlimited paid time off.
• Quarterly mental health days.
• Family planning benefits.
• Professional development stipend.
• Wellness benefits.

Pay

Competitive salary based on experience and qualifications.

Schedule

Full-time position based in San Francisco. Remote work is possible for qualified candidates.