Staff Product Security Engineer

• Sit embedded with Product & Engineering to educate and advocate for security architecture best practices, enabling rapid, secure releases
• Own application security E2E as a hands-on, build-focused engineer
• Lead secure code reviews, threat modeling, architecture-level risk assessments
• Build tooling and automation to scale AppSec across the org
• Manage 3rd-party security reviews and pentesting
• Mentor, guide and grow into a Tech Lead role for the AppSec and Security team

• 8-10+ years of experience, with expertise in AppSec and/or Product Security
• Strong coding proficiency (ability to read/write and reason in production-level code)
• Hands-on familiarity with cloud platforms (GCP or AWS preferred)
• Experience in fast-paced startup environments; proven ability to operate in ambiguous environments
• Clear communicator - ability to explain complex security concepts to engineers and non-technical stakeholders
• CS degree (or related STEM field) from a well-recognized university
• Ability to commute hybrid (3x/week) to downtown SF

Who you are:

• Pragmatic balance of speed and rigor; curious, humble, collaborative
• Excited to be part of a high-momentum, startup environment that embraces innovation

Code Red is partnered with a unicorn FinTech in SF to bring on a Staff Product Security Engineer. This will be a foundational hire within a small, high-impact security org that supports a global organization in hypergrowth mode.