Senior Product Security Engineer

Quick Facts

• Senior Product Security Engineer supporting platform integration and service-connectivity security.

Description

You will secure the platform layer that enables events, messaging, connectors, and APIs—plus agent and Model Context Protocol (MCP) connectors—for safe data exchange. The role focuses on leading threat modeling and security design/code reviews, creating secure-by-default patterns, and shaping how AI agents connect securely. You will partner with engineering and product to fix root causes and mentor junior security engineers.

Responsibilities

• Lead threat modeling and security design reviews for eventing, messaging, integrations, connectors, and APIs that move customer data between systems
• Trace issues to root cause so fixes land in the right place
• Secure service-to-service authentication and external client/connector access, addressing threats like excessive privilege and secret leakage
• Build secure-by-default patterns into frameworks, connector SDKs, and onboarding paths
• Review Java, JavaScript, and TypeScript code to validate authentication, integration, and access-control assumptions
• Partner with architects, engineers, and product owners to move findings to resolution and mentor junior engineers

Requirements

• 5+ years of experience in product, application, or platform security
• Hands-on experience securing backend/integration/service-connectivity systems including REST and GraphQL API security (authentication, rate limiting, input validation)
• Working experience with OAuth 2.0, OpenID Connect (OIDC), and JSON Web Tokens (JWT) plus service-to-service authentication and permission models
• Experience reviewing source code in Java and at least one other language (JavaScript, TypeScript, Python, or Go)

Benefits

• Time off programs
• Medical, dental, vision
• Mental health support
• Paid parental leave
• Life and disability insurance
• 401(k)
• Employee stock purchasing program

Accommodations

Reasonable accommodations are available during the application/recruiting process.