> Markdown version of [/jobs/ext/3876130-staff-product-security-engineer](https://www.wearedevelopers.com/jobs/ext/3876130-staff-product-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Product Security Engineer

- **Company:** Typeface Inc.
- **Location:** Palo Alto, CA, United States
- **Experience:** Expert
- **Salary:** $210,000.0 - $240,000.0
- **Contract:** Permanent contract
- **Skills:** Testing (Software), Java (Programming Language), JavaScript (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Code Review, Cyber Security, Information Systems, Computer Programming, Continuous Integration, Information Leak Prevention, Information Systems Security Architecture Professional, Python (Programming Language), Open Web Application Security, Secure Coding, Software Engineering, Systems Integration, TypeScript, Web Applications, Large Language Models, Software Security, Generative AI, GWAPT, Information Technology, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** October 22, 2026
- **Apply:** https://startup.jobs/staff-product-security-engineer-typeface-10522395

## About the Role

* 10+ years of experience in product security, application security, or software engineering, with a strong track record of securing products at scale
 * Bachelor's degree in Computer Science, Cybersecurity, Information Systems or a related field, or equivalent practical experience
 * Deep knowledge of web application and API security, including the OWASP Top 10 and common vulnerability classes
 * Proven experience with threat modeling, secure architecture reviews, and hands-on code review
 * Strong programming skills in one or more languages such as Python, TypeScript/JavaScript, Go, or Java
 * Experience integrating security tooling into CI/CD pipelines and cloud-native environments (AWS, Azure, or GCP)
 * Excellent communication skills and the ability to thrive independently and in collaborative teams
 * Experience supporting B2B or enterprise SaaS products
 * Bonus: Background securing AI, LLM, or generative AI applications
 * Bonus: Industry certifications such as OSCP, OSWE, GWAPT, or CSSLP

## Description

* Lead security design reviews and threat modeling for new features and core product experiences - from early architecture to production launch
 * Identify, triage, and drive remediation of vulnerabilities across our web applications, APIs, and services
 * Build and scale security tooling in the development lifecycle, including SAST, DAST, dependency scanning, and secrets detection in CI/CD
 * Assess and secure AI and generative AI features against emerging risks such as prompt injection, data leakage, and model misuse
 * Perform hands-on code reviews and penetration tests, and manage our bug bounty and external testing programs
 * Collaborate closely with Product, Engineering and Compliance partners to balance security with speed and a great user experience
 * Create secure coding guidelines and training that raise the security bar across engineering
 * Mentor and support engineers, helping to shape a strong, security-first engineering culture