Product Security Engineer, WorkOS
$175-275k
Salary applicable to US applicants. + Equity
APIs to make apps enterprise-ready
Be an early applicant
APIs to make apps enterprise-ready
101-200 employees
Be an early applicant
$175-275k
Salary applicable to US applicants. + Equity
101-200 employees
Company mission
To build a toolkit to help startups meet the requirements for bringing on enterprise clients.
Role
Who you are
- Risk-focused and pragmatic. You excel at identifying and reasoning about security risk in real-world contexts. You prioritize ruthlessly, always asking: what's the most effective way to reduce risk right now and in the long term?
- A builder who can break things. You're comfortable reading and writing code, and you have a passion for deeply understanding the products you secure. You think like an attacker to find subtle, high impact vulnerabilities and like a defender to design pragmatic, effective mitigations
- A strong partner to engineering. You build trust with engineers by understanding their priorities, making security frictionless, and finding ways to make the secure path, the easiest path
- Excited about AI. You're embracing AI and automation to scale security and reduce toil
- Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you
- 5+ years of experience in a security engineering or security-focused software engineering role
- Ability to execute across a wide range of security functions such as security assessments, penetration testing, responsible disclosure, security tooling integration, etc
- Familiarity with and experience using common industry tooling
- Proven ability to identify vulnerabilities in software, demonstrated through CVEs, bug bounty, blog posts, or prior work experience
- Strong written and verbal communication skills, particularly in partnering with engineering teams
- Comfortable reading and writing code, and able to effectively leverage AI during the process
- Bonus: Experience in the authentication and identity domain
- Bonus: Experience writing production level code, especially developing security features
What the job involves
- The Security team at WorkOS is responsible for keeping the data and identities of hundreds of millions of users secure
- Security is fundamental to our products, and customer trust is the foundation of our success
- We are a highly collaborative group with a strong engineering mindset
- Our security program is shaped by hands-on experience attacking and defending systems, and applying lessons from across the industry
- We embrace the latest advancements in practices and tooling that make modern security teams effective
- We are comfortable in code and collaborate often with engineering to create products that are secure by default
- Lead secure design efforts. Partner with engineering teams on secure design and code reviews. Identify and prioritize risks early in the product lifecycle
- Build secure by default systems. Develop paved paths that systemically reduce risk and make secure development the easiest path for engineers
- Perform offensive security testing. Conduct penetration tests and code audits on new and existing products from an adversarial lens
- Improve our security tooling. Integrate and improve our static analysis, supply chain security, and vulnerability management capabilities across engineering pipelines
- Operate our responsible disclosure program. Run and improve our program by furthering automation, validating submissions, and coordinating remediation
- Improve our products. Write and ship code to remediate vulnerabilities in production systems and improve the security posture of WorkOS products
- Work directly with customers. Help build our customers' trust by directly engaging with their security-related questions and concerns
Our take
The inspiration for WorkOS came from the founder’s previous email startup, Nylas, and the difficulties he faced in crossing what he calls “the enterprise chasm.” The challenge of serving enterprise clients, and meeting their stringent security and admin requirements, is one that many B2B SaaS startups face as they start to scale.
WorkOS steps in at this critical stage, providing a single API driven platform which enables its customers to easily integrate with the major vendors that provide enterprise security and admin solutions. For example, rather than building individual integrations with each of the single sign-on (SSO) providers, a customer would only need to integrate with WorkOS in order to support these solutions.
Enterprise features that WorkOS is providing building blocks for include Single Sign-On, Directory Sync, Audit Trail, and more. WorkOS is helping a wide range of SaaS providers break into enterprise channels and was bolstered by substantial Series B funding in 2022. In that same year, WorkOS acquired its first company, UI framework builder Modulz, a deal that's broadening the scope of API products WorkOS can offer.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
47% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Mar 2026
$100m
SERIES C
Jun 2022
$80m
SERIES B
Total funding: $195m
Company benefits
- WorkOS pays 90% of premiums for employees and dependents to help keep your family healthy
- WorkOS provides a 3% match of your 401k contributions to help you save for retirement
- Relax and recharge with 20 days of paid yearly vacation. We also offer 12 weeks of parental leave for new parents
- Monthly stipend for gyms, yoga classes, race registrations, or whatever keeps you active
- Monthly stipend for a massage, meditation class, therapy, or activities that enhance your mental well-being
- Outfit your working space with a stipend for equipment that will keep you comfortable and productive
Company HQ
Financial District, San Francisco, CA
Leadership
Michael Grinich
(Founder & CEO)Earned a BSc in Computer Science from MIT. Previously worked in the Engineering team at Dropbox, in the Design team at Nest and was the Founder & CEO of Nylas for 4 years.
Share this job
View 25 more jobs at WorkOS