Note: The job is a remote job and is open to candidates in USA. World, through its parent company Tools for Humanity, is building a human network aimed at enhancing trust in an AI-driven internet. The Senior Product Security Engineer will lead security initiatives, ensuring the integrity and safety of products and services while embedding security throughout the development lifecycle.
Responsibilities
- Lead secure architecture reviews and threat modeling sessions for new application and cloud services
- Engineer and implement automated security guardrails and reusable libraries to make the secure path the easy path for developers
- Perform deep-dive, security-focused code and infrastructure reviews in languages like Rust, Go, and Python
- Own the vulnerability management process, from triaging bug bounty submissions to driving remediation efforts with engineering teams
- Mature and scale our Secure SDLC and bug bounty programs to keep pace with a rapidly growing engineering organization
Skills
- 6+ years of hands-on experience in Product Security, Application Security, or Cloud Security
- Proficient in code review and development in languages like Rust, Go, and Python
- Extensive experience securing modern AWS architectures and developing secure infrastructure-as-code (e.g., Terraform and CDK)
- Expert in leading threat modeling sessions and providing actionable guidance to engineering teams
- Strong background in implementing and managing security tooling (SAST, DAST, SCA) and embedding security into CI/CD pipelines
- Deep understanding of web and API security principles (OWASP Top 10) and have experience securing distributed, mobile-first systems
- Experience scaling a security champions program
- Expertise in Kubernetes (EKS) and container security
- Particular interest in securing mobile applications or smart contracts
Benefits
- Competitive long-term incentive package
- Healthcare
- Dental
- Vision
- 401(k) plan and match
- Life insurance
- Flexible time off
- Commuter benefits
- Professional development stipend
Company Overview
World connects users through a privacy-focused network with secure digital asset management. It was founded in 2019, and is headquartered in San Francisco, California, USA, with a workforce of 201-500 employees. Its website is https://world.org.Company H1B Sponsorship
World has a track record of offering H1B sponsorships, with 1 in 2024. Please note that this does not guarantee sponsorship for this specific role.