About the role

Product Security Engineer securing WorkOS developer tools and APIs for enterprise authentication and identity. Leading secure design, offensive testing, tooling, and vulnerability remediation.

Responsibilities

Partner with engineering teams on secure design and code reviews
Identify and prioritize security risks early in the product lifecycle
Develop paved paths and systems that make secure development the easiest path
Conduct penetration tests and code audits on new and existing products
Integrate and improve static analysis, supply chain security, and vulnerability management across engineering pipelines
Operate and automate the responsible disclosure program, validate submissions, and coordinate remediation
Write and ship production code to remediate vulnerabilities and improve product security posture
Engage directly with customers on security-related questions and concerns

5+ years of experience in a security engineering or security-focused software engineering role
Ability to execute across security functions including security assessments, penetration testing, responsible disclosure, and security tooling integration
Familiarity with and experience using common industry tooling
Proven ability to identify software vulnerabilities, demonstrated through CVEs, bug bounty, blog posts, or prior work experience
Strong written and verbal communication skills, particularly when partnering with engineering teams
Comfortable reading and writing code
Able to effectively leverage AI during the process
Experience in authentication and identity domain (bonus)
Experience writing production-level code, especially developing security features (bonus)
Must be legally authorized to work in the United States
Benefits listed are US-only; compensation outside the US is adjusted based on local market benchmarks