> Markdown version of [/jobs/ext/4621112-platform-engineer-product-security](https://www.wearedevelopers.com/jobs/ext/4621112-platform-engineer-product-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform Engineer, Product Security - **Company:** Wispr Flow - **Location:** San Francisco, CA, United States - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Cloud Computing, Continuous Delivery, Continuous Integration, Design of User Interfaces, Human-Computer Interaction, Systems Development Life Cycle, Software Engineering, Software Security, Static Application Security Testing, Dynamic Application Security Testing - **Published:** November 7, 2026 - **Apply:** https://www.careerbuilder.com/job-details/platform-engineer-product-security-san-francisco-ca--07a2412c-cecd-4212-bc22-f222ac2e6a3b ## About the Role Artificial Intelligence (AI), User Interface/Experience (UI/UX), Product Flow, Problem Solving Skills, Testing, Cloud Computing, Risk, Software Development Lifecycle (SDLC), Continuous Deployment/Delivery, Continuous Integration ## Description Wispr works with people's private thoughts and increasingly acts on their behalf. Earning that trust requires making security a property of the product. You'll own product security across Wispr's agentic, client, and cloud surfaces., * Rank threats across the product and drive the highest-risk issues through closure * Embed security and privacy by design into the SDLC and CI/CD pipeline * Build trusted SAST, DAST, SCA, and AI-assisted vulnerability discovery and remediation * Lead threat modeling and assessments across desktop, mobile, web, UI, and API surfaces You may be a fit if * You've personally built and operated security systems other engineers depend on * You've owned a high-volume vulnerability queue and can separate urgent risk from noise * You have hands-on product-security experience across client and service surfaces * You've applied security and privacy practices throughout the development lifecycle * You treat security controls as a developer product