> Markdown version of [/jobs/ext/4629394-staff-product-security-engineer](https://www.wearedevelopers.com/jobs/ext/4629394-staff-product-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Staff Product Security Engineer - **Company:** Code - **Location:** San Francisco, CA, United States - **Experience:** Expert - **Salary:** $235,000.0 - $275,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Software System Penetration Testing, Cloud Computing, Cyber Security, Computer Programming, Secure Coding, Software Security - **Published:** November 7, 2026 - **Apply:** https://www.juju.com/job/28_25304_5f8a2d50a3749c0ecf692053bf68f3e0 ## About the Role * 8-10+ years of experience, with expertise in AppSec and/or Product Security * Strong coding proficiency (ability to read/write and reason in production-level code) * Hands-on familiarity with cloud platforms (GCP or AWS preferred) * Experience in fast-paced startup environments; proven ability to operate in ambiguous environments * Clear communicator - ability to explain complex security concepts to engineers and non-technical stakeholders * CS degree (or related STEM field) from a well-recognized university * Ability to commute hybrid (3x/week) to downtown SF Who you are: * Pragmatic balance of speed and rigor; curious, humble, collaborative * Excited to be part of a high-momentum, startup environment that embraces innovation ## Description * Sit embedded with Product & Engineering to educate and advocate for security architecture best practices, enabling rapid, secure releases * Own application security E2E as a hands-on, build-focused engineer * Lead secure code reviews, threat modeling, architecture-level risk assessments * Build tooling and automation to scale AppSec across the org * Manage 3rd-party security reviews and pentesting * Mentor, guide and grow into a Tech Lead role for the AppSec and Security team