Product Security Engineer Jobs

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Security Engineer, Customer Identity, Advanced Threat Protection Get to know Okta Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth. At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences. Join our team! We’re building a world where Identity belongs to you. The Role We seek a knowledgeable and research-focused Security Engineer to join a new Advanced Threat Protection team within Auth0 Customer Identity. This role does two things at once: it researches how attackers will use AI against identity systems, and it researches and builds how we use AI to defend our products, our infrastructure, and — most importantly — our customers' tenants. This role is a key member of the Security team embedded within the Customer Identity product unit and works across multiple functions to get ahead of emerging AI threats, supporting the growth of our global Customer Identity business. We are an engineering-focused team that seeks to stay on the cutting edge of security technology and t

Sr. GRC Engineer The Team + The Role Pendo's Information Security team protects the data entrusted to Pendo and helps ensure our products are built with security and privacy by design. The team spans Security Operations, Product Security, and Compliance and Risk. With a small team and broad scope, the work directly supports the security, resilience, and trust of Pendo's products and operations. The Sr. GRC Engineer is an AI-first technical leader who helps drive the evolution of Pendo's governance, risk, and compliance program. This role independently leads complex compliance, risk, and incident-response work while identifying program maturity gaps, translating security risk into business terms, and contributing to security roadmap and investment decisions. Success means building durable controls and programs that reduce risk and operational friction, not simply completing audits. This role is based in our Raleigh office. What this looks like day-to-day AI-driven compliance and operations acceleration: Use AI to accelerate audit evidence preparation, policy documentation, control testing workflows, and regulatory research. Evaluate GRC platform automation capabilities and integrate AI tooling where it reduces manual overhead, then document and share effective approaches with the team. Security program strategy and roadmap: Identify maturity gaps across compliance and security operations and translate them into prioritized roadmap recommendations grounded in business risk. Contribute to security investment discussions, clarify tradeoffs between coverage, cost, and risk, and anticipate emerging regulatory requirements before they become audit findings. Compliance program ownership: Own one or more regulatory compliance programs end-to-end, including SOC 2 Type II, ISO 27001/42001, PCI-DSS, GovRAMP, or FedRAMP. Lead control design, evidence collection, auditor relationships, and remediation tracking to maintain effective and durable compliance programs. Risk assessment

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role AlphaSense's GRC function is making a deliberate investment in automation and engineering, and we need a Senior GRC Engineer to lead that charge. You will design and build the technical automation that powers our compliance testing, evidence collection, risk monitoring, and GRC platform integrations—and you will own the governance architecture for how AI and agentic systems are built and deployed at AlphaSense. You sit at the intersection of security engineering and compliance operations. You are not just AI-curious; you are AI-native in practice: you use LLMs and agents for real substantive work—analysis, drafting, automation, code, investigation—and you apply rigorous judgment about where AI creates leverage, where it introduces risk, and where a human must remain in the loop. The goal is continuous compliance infrastructure that generat

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As a Threat Intelligence Platform Engineer on the Threat Intelligence team within Security Operations, you'll own Vertex Synapse in production - the platform that turns adversary intelligence into detections, blocks, and decisions across Coinbase. The TI team protects billions of dollars in digital assets by collecting, modeling, and operationalizing intelligence on the most sophisticated cyber threats targeting the crypto ecosystem. You'll keep the platform healthy, ingest and model new intelligence sources, and ship the automations that weave threat intelligence into the fabric of security operations at Coinbase. What you'll do: Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene Build and maintain intelligence feed integrations, enrichments, and tagging so new sources land modeled and usable by stakeholders Ship intelligence into downstream controls and data pipelines, including detections, blocklists, data warehouses, and agent workflows Partner across Security and Product to translate intelligence requirements into production capabilities Rapidly prototype and implement features, fixes, and tooling as required by the team's Intelligence Analysts and stakeholders Required Skills and Experience: 2+ years building and operating threat intelligence platforms or security data pipelines in produc

At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. Our security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations. We are looking for a collaborative, innovative Group Tech Lead to join our security organization in Warsaw. This is a senior technical leadership role that sits at the intersection of offensive and defensive security — a true purple team visionary who will design and drive Asana's threat operations strategy from the ground up. You will set the long-term technical direction for how we detect, emulate, respond to, and continuously improve our defences against real-world adversaries. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve Purple Team Strategy & Technical Leadership: Define and own the technical strategy for a fully integrated purple team function, bridging offensive (red team) and defensive (blue team) capabilities into a cohesive, intelligence-driven program. Adversary Emulation: Design and implement a structured adversary emulation programme based on real threat intelligence, ensuring red team exercises directly improve blue team detection and response playbooks while establishing continuous feedback loops. Security Maturity & Industry Standards: Lead Asana's security maturity journey, defining a roadmap that progressively advances capabilities toward frameworks and standards such as NIST CSF, ISO 27001, SOC 2, and MITRE ATT&CK maturity l

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Okta’s Workforce Identity Cloud Security Engineering group is looking for an experienced and passionate Staff Site Reliability Engineer to join a team focused on designing and developing Security solutions to harden our cloud infrastructure. We embrace innovation and pave the way to transform bright ideas into excellent security solutions that help run large-scale, critical infrastructure. We encourage you to prescribe defense-in-depth measures, industry security standards and enforce the principle of least privilege to help take our Security posture to the next level. Our Infrastructure Security team has a niche skill-set that balances Security domain expertise with the ability to design, implement, rollout infrastructure across multiple cloud environments without adding friction to product functionality or performance. We are responsible for the ever-growing need to improve our customer safety and privacy by providing security services that are coupled with the core Okta product. This is a high-impact role in a security-centric, fast-paced organization that is poised for massive growth and success. You will act as a liaison between the Security org and the Engineering org to build technical leverage and influence the security roadmap. You will focus on engineering security aspects of the systems used across our services. Join us and be part of a company that is about to change the cloud computing landscape forever. Bring all the passion and dedicat

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Abuse Research team is dedicated to proactively hunting for emerging abuse vectors and studying complex attacker behaviors. Rather than just reacting to alerts, the team maps complete abuse paths across Stripe products and external systems to validate novel findings and explain the underlying product conditions that enable fraud. By building continuous abuse tests with agentic testing and related systems, they translate their deep research into actionable threat advisories, strategic control recommendations, and regression scenarios that fortify Stripe’s defenses. What you’ll do You will lead the Abuse Research Group (ARG)—a team of threat intelligence analysts, fraud researchers, and detection engineers focused on proactively identifying and mitigating threats to Stripe and our merchants. You will set the research agenda, guiding work across threat actor tracking, hands-on fraud investigations, merchant ecosystem defense, and the detection pipelines that turn findings into production enforcement. You will scale the team through hiring, coaching, and talent development, while serving as a technical advisor on complex investigations. You will also own ARG's relationships with key partners—including Risk, Trust & Safety, Fraud Platform, and Security Engineering. Lead, develop, and retain a team of threat intelligence analysts, fraud researchers, and detection engineers who thrive at the intersection of adversarial research an

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the Role + Team The Security Engineering team builds the identity and access control plane governing how employees, services, and agentic workloads access Robinhood’s critical infrastructure. We are a platform-building engineering team focused on creating secure, frictionless, and automated self-service access systems at scale. As a Staff Software Engineer on this team, you will shape Robinhood’s foundational identity architecture, define technical strategy, and build Tier-0 access infrastructure used across the entire company! From solving complex authentication and authorization challenges to setting secure guardrails for emerging AI and agentic workflows, your technical leadership will directly impact every product team at Robinhood! What You'll Do Access Control Plane Architecture: Define and build the core technical architecture for managing employee, service, non-human, and agentic access across company-wide resources Tier-0 Platform Engineering: Design, build, and operate highly available, resilient, and observable backend identity infrastructure using Go, Python, Rust, or comparable systems languages. AuthN & AuthZ Solutions: Implement modern identity protocols and access frameworks (OAuth 2.0, OpenID Connect, RBAC, ABAC, and policy-based access controls). AI & Agentic Access Governance: Develop secure access patterns, identity frameworks, governance, and observability guardrails for AI agents, LLM applications, and Model Context Protocol (MCP) systems. Self-Service Developer Experience: Create automated, developer-friendly platforms that allow teams to request, approve, provision, and audit access without ma

The mission of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It’s why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It’s why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. And it’s why our business strategy centers on making journalism so good that it’s worth paying for. About the Role, Mission or Department Overview The Senior Engineer, Cybersecurity is a hands-on contributor who designs, builds, and operates security controls and services that protect The Times' systems, data, and users. As a member of the Security Architecture team, you will own complex initiatives end-to-end, drive measurable risk reduction, and collaborate across product engineering and enterprise technology with technical depth, operational rigor, and clear communication aligned with business outcomes. Who are we? Cybersecurity helps prevent The Times from becoming news. Our teams work to protect the news makers, their support staff, the platforms they rely on every day, as well as all of The Times' products and services, and our readers who consume them. This role reports to the Director of Engineering, Cybersecurity. Responsibilities: Create an environment that favors context, not control. Empower product engineers and ensure they have the relevant information and tools to deliver secure products and services. Design, implement, and operate security controls and services (e.g., identity and access management, secrets management, endpoint/agent hardening, network segmentation, detection, and response automation) that meet reliability, security, scalability, and observability standards. Partner with product and platform teams to integrate security into architecture and developer workflows while articulating business impact and tradeoff

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As a Security Scientist, you will leverage your data analysis skills and help identify and drive impactful projects to improve the safety and security of Figma's product, platform, and our IT systems. The mission of the Figma Security team is to help Figmates ship the most secure and safe product to our users. We are looking for security scientists with a strong grasp of security and anti-abuse fundamentals. You will partner closely with teams in Security Engineering as well as teams across the company to focus on systemic security and safety improvements and risk reduction. You will also apply your security expertise and analytical skills to support and participate in security design reviews and consulting, incident response, and risk management. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Collaborate cross-functionally across the company to understand existing security and anti-abuse problems and work with engineering, product, data science, and other teams on solutions Understand attacker and user behavior on the Figma platform and inside Figma through creation of new datasets, metrics, experimentation, etc., and guide strategy and decision making Build detections, tune signal quality, and measure coverage across Figma's products, platforms, and internal systems, turning attacker behavior into durable, data-driven detections Lead and support security investigations, developing the datasets, tooling, and analysis

About the Team DoorDash's Red Team exists to find critical attack paths before real adversaries do. We operate across the full adversary simulation lifecycle — scoping threat-informed engagements, executing realistic attack chains, and working with engineering and detection teams to close the gaps we uncover. Our attack surface spans a multi-sided marketplace: consumer and merchant data, payment systems, driver logistics, and the cloud-native infrastructure that ties it all together. We're looking for a leader who can take this team to the next level. About the Role We need an offensive security leader who stays close to the work. As the Engineering Manager of the Red Team, you'll inherit an existing team, level it up, expand headcount, and build the partnerships needed to turn red team findings into real engineering change. This is a player-coach role — you'll set strategic direction while staying hands-on with engagement scoping, tradecraft, and tooling decisions. You'll report to the Director of Global Security Services. You're excited about this opportunity because you will… Define the red team's strategic roadmap — engagement cadence, target prioritization, and capability development — aligned to DoorDash's threat landscape. Lead, coach, and grow a team of offensive security engineers. Hire intentionally to fill capability gaps as the team scales. Stay technically involved in engagement scoping, methodology, and tooling architecture. Guide adversary simulation, not just manage it. Drive remediation outcomes cross-functionally — partner with detection/response, AppSec, infrastructure security, and product engineering to make sure findings get fixed, not just documented. Build purple team workflows with detection engineering to validate and improve defensive coverage. Direct the development of red team infrastructure and custom tooling as production-quality software. Translate offensive findings into risk language that engineers, VPs, and non-technical stakeholde

The mission of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It’s why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It’s why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. And it’s why our business strategy centers on making journalism so good that it’s worth paying for. . About the Role, Mission or Department Overview As an Engineering Manager for Cybersecurity at The New York Times, you will lead the team responsible for building and operating the platforms, tooling and services that keep our systems secure at scale. Our engineers design and run the infrastructure that underpins vulnerability scanning, secrets management, secure-by-default platforms and other core security capabilities used across the entire technology organization. You will work with partners in Cybersecurity, Developer Platforms, Enterprise Technology and Product Engineering to deliver reliable, developer-friendly security services. This is a hands-on leadership role where you'll balance people management with technical decision-making. You'll coach engineers, shape technical roadmaps, and help your teams make risk-informed decisions that support both engineering goals and the broader business. You will report to the Director of Engineering, Cybersecurity within the Information Security organization. Information Security helps prevent The Times from becoming news. Our department protects the journalists who report the news, the colleagues who support them, the platforms they rely on every day and the readers who depend on our products. We run programs across security engineering, application security, incident response, governance and more, partnering closely with teams throughout the company to keep our systems dependable and safe. Resp

P-1489 About Databricks At Databricks, we are passionate about enabling data teams to solve the world's toughest problems, from making the next mode of transportation a reality to accelerating the development of medical breakthroughs. We do this by building and running the world's best data and AI infrastructure platform so our customers can use deep data insights to improve their business. Founded by engineers, and customer obsessed, we leap at every opportunity to solve technical challenges, from designing next-gen UI/UX for interfacing with data to scaling our services and infrastructure across millions of virtual machines. And we're only getting started. About the Role As a Staff Technical Program Manager (TPM) for Trust & Safety Engineering, you will drive technical execution across infrastructure initiatives that protect platform integrity, user identity, and data privacy at scale. You will work directly with Security Engineering, Identity Infrastructure, Machine Learning, and Core Platform teams to design, build, and deploy systems for authentication, access control, and anomaly detection. Working embedded within engineering groups, you will translate identity protocols, privacy-by-design principles, and threat mitigation models into clear technical specifications, system dependencies, and actionable execution roadmaps. This role is focused on technical execution, resolving complex engineering dependencies, and delivering scalable systems that guarantee identity integrity and prevent platform abuse. Key Responsibilities Define, articulate, and own the security program strategy and roadmap, ensuring alignment with Databricks’ business and product goals. Drive initiatives across Identity Infrastructure, Data Governance, Platform Security, Machine Learning, and Trust Engineering. Oversee execution of complex security engineering multi-half initiatives (AuthN/AuthZ/Secret/PKI/Cryptography,etc), demonstrating ownership from strategy through outcomes. Leverage

P-1489 About Databricks At Databricks, we are passionate about enabling data teams to solve the world's toughest problems; from making the next mode of transportation a reality to accelerating the development of medical breakthroughs. We do this by building and running the world's best data and AI infrastructure platform so our customers can use deep data insights to improve their business. Founded by engineers and customer obsessed, we leap at every opportunity to solve technical challenges, from designing next-gen UI/UX for interfacing with data to scaling our services and infrastructure across millions of virtual machines. And we're only getting started. About the Role As a Staff Technical Program Manager (TPM) for Trust & Safety Engineering, you will drive technical execution across infrastructure initiatives that protect platform integrity, user identity, and data privacy at scale. You will work directly with Security Engineering, Identity Infrastructure, Machine Learning, and Core Platform teams to design, build, and deploy systems for authentication, access control, and anomaly detection. Working embedded within engineering groups, you will translate identity protocols, privacy-by-design principles, and threat mitigation models into clear technical specifications, system dependencies, and actionable execution roadmaps. This role is focused on technical execution, resolving complex engineering dependencies, and delivering scalable systems that guarantee identity integrity and prevent platform abuse. Key Responsibilities Define, articulate, and own the security program strategy and roadmap, ensuring alignment with Databricks’ business and product goals. Drive initiatives across Identity Infrastructure, Data Governance, Platform Security, Machine Learning, and Trust Engineering. Oversee execution of complex security engineering multi-half initiatives (AuthN/AuthZ/Secret/PKI/Cryptography,etc), demonstrating ownership from strategy through outcomes. Leve

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. Snowflake is about empowering enterprises to achieve their full potential, and people too. With a culture that's all in on impact, innovation, and collaboration, Snowflake is the sweet spot for building big, moving fast, and taking technology and careers to the next level. We are hiring a Technical Program Manager for our Security organization. Security at Snowflake spans Product Security, Database Security, Threat Detection, and Compliance — the teams responsible for protecting the world's most sensitive data at the scale of one of the world's most trusted cloud platforms. This is a highly visible, high-impact role for a senior TPM who thrives at the intersection of technical depth and organizational influence. Program Ownership & Backlog Management Lead strategic, high-ambiguity Security programs from inception through execution, turning 0-to-1 initiatives into structured, measurable outcomes. Own executive-facing operating mechanisms for the Security org, including planning, execution reviews, SteerCos, strategy summits, design and product reviews, QBRs and leadership decision forums. Build and scale execution rituals across Security teams, partnering with Engineering, Product, and TPM to strengthen accountability, visibility, and operational discipline. Drive portfo