Product Security Engineer, Lattice
CA$93.8-125k
This position is also eligible for incentive stock options
More information about location
Employee success platform
Be an early applicant
Employee success platform
501-1000 employees
Be an early applicant
CA$93.8-125k
This position is also eligible for incentive stock options
More information about location
501-1000 employees
Company mission
To build cultures where employees and their companies thrive.
Role
Who you are
- 1–3+ years of experience in product security, application security, or software engineering
- Experience writing and maintaining code in JavaScript/TypeScript (or similar languages like Python or Ruby)
- Familiarity with common web and API vulnerabilities (e.g., OWASP Top 10)
- Exposure to security testing tools (SAST, DAST, dependency scanning, etc.)
- Experience working in or with cloud environments (AWS or similar)
- Ability to identify common security risks and suggest practical mitigations
- Understanding of secure coding practices and basic security controls
- Interest in how security decisions impact real-world product systems
- Strong communication skills and ability to work closely with engineering teams
- Willingness to ask questions, learn quickly, and take ownership of well-scoped problems
- Ability to contribute to team discussions and share security context effectively
Desirable
- Experience with modern web architectures (Next.js, NestJS, GraphQL)
- Familiarity with containerization or Kubernetes
- Experience or interest in AI/LLM security, including
What the job involves
- You will work closely with product and platform engineering teams to improve the security of Lattice’s applications and services
- Partner with engineers to identify, triage, and remediate security issues in product features and services
- Participate in security reviews and threat modeling for new features and systems
- Perform security-focused code reviews and help identify common vulnerabilities
- Contribute to secure-by-default patterns, libraries, and tooling in our TypeScript-based stack
- Help implement and operate security tooling (SAST, DAST, dependency scanning, etc.)
- Support vulnerability management workflows, including internal findings and bug bounty reports
- Assist in investigating security issues and assessing risk and impact
- Collaborate with platform and infrastructure teams to improve application and cloud security posture
- Contribute to improving security practices in AWS-based environments
- Assist in identifying and mitigating risks in AI/LLM-powered features, including prompt injection, data leakage, and unsafe output handling
- Apply emerging best practices (OWASP Top 10 for LLM Applications) to real product use cases
- Contribute to security guidance, documentation, and training for engineering teams
- Help improve how security is integrated into the development lifecycle
Our take
Modern HR departments face many challenges, such as maintaining employee engagement, often across a distributed workforce. Lattice’s people success platform solves this problem.
Lattice enables companies to launch effective performance review cycles, implement OKRs and facilitate manager meetings, all of which are proven to drive engagement and productivity. Lattice’s solutions are now trusted by over 5,000 business leaders, including executives at Reddit, Slack and Cruise. And the company is now valued at over $3B, which is testament to industry confidence in its product.
Recently, the company has launched a London office, which will accelerate its international expansion, aided by some serious funding. Scaling in this way will be an instrumental part of their future success, allowing the company to compete with rival HR software providers, and become central to carving out the new world of work.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
109% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jan 2022
$175m
SERIES F
Mar 2021
$60m
SERIES E
Total funding: $329.4m
Company HQ
Rincon Hill, San Francisco, CA
Leadership
Sarah Franklin
(CEO)Prior to joining Lattice in 2024, Sarah spent 16 years at Salesforce, while there she held various roles, including President & CMO. She also worked at Amazon Web Services as the Head of Database Product Marketing.
Gabe Cortes
(CFO)Prior to joining lattice in 2023, Gabe served as the CFO of Included Health for 6 years. He also spent 3 years at Workday as VP of Finance and Senior VP of Global Field Operations.
Cheryl Sanclemente
(CMCO)Cheryl joined Lattice in 2024 as a Chief Communications Officer, moving into the role of Chief Marketing and Communications Officer in 2025. Previously, she spent 8 years at Salesforce, holding various roles while there, including Senior Director of Corproate PR and VP of Public Relations.
Amy Christensen
(CRO)Prior to joining Lattice in 2025, Amy was GM of americas/Head of Revenue at Asana. She also spent nearly 10 years at LinkedIn, holding various roles including Senior Director of LinkedIn Talent Solutions.
Share this job
View 8 more jobs at Lattice