Product Security Engineer

About this role

Help secure Superhuman’s AI-powered productivity products and enable teams to ship quickly with security built in. The role focuses on product security, including securing AI agents and applications, improving security automation, and establishing secure-by-default practices.

About the company

Superhuman is an email productivity tool designed to enhance users' efficiency and workflow. The company serves professionals looking to optimize their email management through innovative features and streamlined processes.

What you'll do

• Partner with product engineering teams on threat models, design reviews, secure code reviews, and manual testing.
• Build end-to-end solutions to reduce product security risks.
• Improve product security tools, automation, and the bug bounty program.
• Develop AI-based tools to help the security team work more efficiently.
• Communicate security risks and trade-offs across engineering teams.

What we're looking for

• 5+ years of experience securing applications at scale.
• Experience across secure SDLC activities, including threat modeling, design and code reviews, and web application penetration testing.
• Familiarity with SAST, DAST, and SCA tools.
• Experience using AI to address security challenges at scale.
• Programming experience in at least one language, such as Java, Python, JavaScript, or Go.
• Experience managing vulnerability disclosure programs or conducting bug bounty research.
• Ability to work independently and collaborate across teams in a fast-paced environment.

Nice to have

• Experience with HackerOne or Bugcrowd.

Benefits

• Equity
• 20 days of paid time off, 12 paid holidays, two floating holidays, and flexible sick time.
• Paid parental leave
• 401(k) or RRSP matching
• Health, disability, and life insurance benefits
• Professional development budget and stipends