Asana

Product Security Engineer

31k - 36k PLN31 000 - 36 000 PLN/ mies./ mies.UoPUmowa o pracę (brutto)

SeniorHybryda·WarszawaFull-time·Umowa o pracę

#457220·Dodano miesiąc temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Securityproduct securityPython JavaScript TypeScript ScalaAI

Podsumowanie oferty

The Product Security Engineer will partner with product and infrastructure teams to ensure security is integrated throughout the software development lifecycle. The role involves conducting security reviews, building secure frameworks, and championing security considerations for web, mobile, and AI-powered products. The position supports scaling security practices and addressing AI-specific security risks.

Wymagania

5+ years in application/product security or security-focused software engineering.
Strong coding experience in Python, JavaScript, TypeScript, or Scala.
Deep knowledge of OWASP Top 10 and web vulnerabilities (XSS, CSRF, SSRF, SQL injection).
Familiarity with AI/ML security and risks like prompt injection.
Experience with SAST/DAST tools, software composition analysis, and vulnerability management.
Skilled in security design reviews and threat modeling.
Excellent communication skills.
Pragmatic, collaborative mindset focused on defense against attacks.
Demonstrated curiosity about AI tools and emerging technologies.

Obowiązki

Partner with product and engineering teams to integrate security into products and platform.
Conduct security architecture reviews, threat modeling, and code reviews.
Develop and maintain secure-by-default frameworks and libraries.
Build automated security tooling including static and dynamic analysis and automated red-teaming.
Identify and address AI-specific security risks such as prompt injection and insecure permissions.
Triage and remediate vulnerabilities from bug bounty, testing, and automation.
Influence engineering initiatives via design and roadmap reviews.
Investigate product security incidents using logs and monitoring tools.
Improve software supply chain security including dependency management and SCA tooling.
Deliver training on secure coding and emerging threats.
Stay informed on industry trends, threats, and best practices.
Collaborate on strategies for risk management.

Benefity

Generous and transparent compensation with base salary and RSUs.
Contract of Employment with an option for 50% tax deductible author's rights costs.
Health insurance including dental and travel coverage (Lux Med).
Breakfast and lunch catering on office days.
Vacation allowance.
Career growth budget.
Home office setup budget.
Gym/Fitness card.
Fertility healthcare and family support with Carrot.
Mental health support via Modern Health.
Group life insurance.
MacBooks with necessary accessories provided.

Opieka zdrowotna

Firmowa stołówka

Płatny urlop

Dofinansowanie szkoleń

Karta sportowa

Ubezpieczenie

Premie

Inne informacje

Please be informed that the data controller is Asana, 633 Folsom Street, Suite 100, San Francisco, California 94107, US. Personal data is processed for recruitment purposes with rights to access, rectify, erase, restrict, object, and portability. Providing mandatory data is required, refusal may prevent participation in recruitment. Consent to personal data processing can be withdrawn anytime.

Asana

21 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz