Product Security Engineer

Quick Facts

• Role: Product Security Engineer
• Team: Product Security
• Location: Warsaw office with office-centric hybrid schedule (Mon/Tue/Thu in office; Wed optional WFH; Fri varies by work)
• Employment: Contract of Employment (UoP) in Poland

Description

Join the Product Security team to partner with product and engineering teams to design and ship secure software. Build secure-by-default frameworks and automated security tooling to scale security coverage, including addressing AI-specific security risks across web, mobile, and AI surfaces. You’ll also review designs, remediate vulnerabilities, and investigate security incidents to keep the organization’s security posture strong.

Responsibilities

• Partner across the full software development lifecycle to ensure security is built into products and the platform
• Conduct security architecture reviews, threat modeling, and code reviews
• Develop and maintain secure-by-default frameworks and libraries for engineering teams
• Build and maintain automated security tooling (static and dynamic analysis, custom SAST/DAST checks, automated red-teaming)
• Identify and address AI-specific risks such as prompt injection, insecure tool permissions, and abuse-resistant design
• Triage, investigate, and drive vulnerability remediation from bug bounty, internal testing, and automated tooling
• Influence engineering initiatives via design and roadmap reviews and security constraint communication
• Investigate product security incidents using logs and monitoring tools to contain, analyze, and resolve
• Evaluate and improve software supply chain security (dependency management, SCA, third-party risk)
• Develop and deliver training on secure coding best practices and emerging threats
• Stay up to date on industry trends and evolving threats
• Collaborate on short-term and long-term risk management strategies

Requirements

• 5+ years of experience in application security, product security, or security-focused software engineering
• Strong software engineering background with Python, JavaScript/TypeScript, or Scala
• Deep knowledge of OWASP Top 10 and common web vulnerabilities such as XSS, CSRF, SSRF, and SQL injection
• Familiarity with AI/ML security concepts, including prompt injection and agentic attack surfaces
• Experience with SAST/DAST, SCA, and vulnerability management tools
• Experience performing security design reviews and threat modeling for complex applications
• Excellent communication skills with technical and non-technical partners

Benefits

• Generous, transparent and fair compensation system (base salary and RSUs); estimated base salary range: 31,000–36,000 PLN gross/month
• Contract of Employment (UoP) in Poland, with option of 50% tax-deductible costs for applicable author’s rights usage
• Health insurance with dental and travel coverage (Lux Med)
• Breakfast and lunch catering on office days
• Vacation allowance
• Career growth budget and home office setup budget
• Gym/Fitness card
• Fertility healthcare and family-forming support with Carrot
• Mental health support in Modern Health
• Group life insurance
• MacBooks with necessary accessories