Product Security Engineer

About the role

Superhuman offers a dynamic hybrid model, and candidates in this role can be based remotely. You may be expected to travel to meet in person during your team’s scheduled collaboration weeks. Managers will determine in-person time according to business needs.

ABOUT SUPERHUMAN

Grammarly is now part of Superhuman, the AI productivity platform on a mission to unlock the superhuman potential in everyone. The Superhuman suite of apps and agents brings AI wherever people work, integrating with over 1 million applications and websites. The company’s products include Grammarly’s writing assistance, Superhuman Docs's collaborative workspaces, Mail’s inbox management, and Go, the proactive AI assistant that understands context and delivers help automatically. Founded in 2009, Superhuman empowers over 40 million people, 50,000 organizations, and 3,000 educational institutions worldwide to eliminate busywork and focus on what matters. Learn more at superhuman.com http://superhuman.com and about our values here https://blog.superhuman.com/our-values/.

THE OPPORTUNITY

Superhuman is building the AI-native future of work: a family of products people and companies rely on to think, write, and get things done faster. We ship AI features and agents at a pace that makes security one of the most interesting problems in the building, and we're looking for a Product Security Engineer to help us solve it. Your job won't be to slow us down; it will be to make moving fast the safe default. You will be building the identity model, guardrails, and secure-by-default platform that lets our engineers and AI systems operate boldly. You'll work on bleeding-edge AI and product security problems: securing AI agents and applications, automating KTLO and toil work away, and empowering our engineers to build quickly and securely because the safe path is the default path.

As a Product Security Engineer, you will:

- Collaborate with Product Engineering teams throughout the SDLC, creating Threat Models, conducting Design Reviews, Secure Code Reviews, and manual testing to identify vulnerabilities.

- Develop and implement end-to-end security solutions to mitigate risks across our product suite.

- Help drive improvements across our Product Security tooling, automation, and bug bounty program.

- Experiment with and develop AI-based tools to enable the Security team to move even faster.

- Be the voice of our customers, actively engaging stakeholders across engineering teams, communicating security risks and trade-offs while keeping customer data secure.

QUALIFICATIONS

- Has 5+ years of relevant experience in securing applications at scale.

- Experience working at each touchpoint in a secure SDLC: threat modeling, design reviews, secure code reviews, and web app pentesting.

- Familiarity with the standard Product Security tool suite: SAST, DAST, and SCA.

- Experience with using AI to solve Security challenges at scale.