Staff Product Security Engineer, Lattice

• Strong software development experience, ideally with modern web languages like Typescript (or Python, Ruby, etc.), and a proven track record of securing production applications
• Experience securing modern APIs, including GraphQL, and implementing tools to automate vulnerability detection
• Deep understanding of secure coding practices and experience designing or reviewing web applications and APIs
• Ability to identify, reproduce, and remediate security vulnerabilities (e.g., OWASP Top 10, CWE)
• Familiarity with security tools for static analysis, dependency management, and vulnerability detection
• Strong communication and collaboration skills—you can translate security concepts into actionable guidance for engineers

Desirable

• We use a modern tech stack and love experimenting with new technologies, striving for maintainable, robust, and performant code
• We’re highly collaborative, iterative, and work closely with designers and product managers to deliver not just great technical architecture but also an exceptional product experience
• We’re looking for a Staff Product Security Engineer to partner with product teams in ensuring our applications are secure by design
• You’ll provide technical leadership to shape security architecture, define secure coding practices, and prevent vulnerabilities early in the software development lifecycle
• In this role, you’ll deliver secure development libraries and tools, conduct targeted reviews and threat models, and enable teams through education and mentorship
• You’ll also scale security knowledge across engineering while improving the systems and processes that make building secure products easier
• Collaborate with engineering, product, and design teams to identify risks early and architect secure solutions for Typescript-based applications (e.g., Next.js, NestJS)
• Define and promote secure coding practices for modern web technologies, including REST and GraphQL APIs
• Advise & consult on the building & maintenance of security-focused libraries and reusable paved roads to prevent classes of vulnerabilities across teams
• Drive adoption of security tools (e.g., linters, SAST) and patterns that improve consistency, scalability, and developer productivity
• Lead threat modeling, targeted code reviews, and security assessments for critical product designs
• Partner with teams to triage, reproduce, and remediate vulnerabilities, providing guidance on root causes and secure alternatives
• Implement and scale automated tooling to identify common risks early in the development process
• Mentor and consult with product teams on security-by-design principles and secure development practices
• Assist in leading and scaling the Security Champions program, empowering engineers to embed security within their workflows
• Deliver tailored training and workshops to grow application security expertise across engineering
• Collaborate with designers and product managers to integrate security considerations from ideation to deployment
• Drive adoption of secure SDLC processes and tools to align engineering practices with security best practices
• Improve processes for tracking, triaging, and addressing security issues efficiently and transparently
• Ensure features involving authentication, authorization, and sensitive data meet high security standards
• Influence engineering and leadership teams to prioritize security initiatives that align with company goals