Senior Product Security Engineer, Hyperscience

• If you thrive on high-impact work, enjoy deep technical challenges, and want to take ownership of a critical function, this is the opportunity for you
• Programming Proficiency: Ability to read Python fluently and write production-ready code. (i.e: When an engineering team asks how to fix a vulnerability, you can open a PR with the code that fixes it, not a link to an OWASP article.) Also comfortable with shell scripting to build security automation and tooling
• Software Security Experience: Bring 5+ years of Product Security experience, partnering with developers in a SaaS environment to build and scale a software assurance program
• Offensive Security Skills: Show a practical ability to manually identify and exploit common security flaws in web applications and RESTful APIs
• Cloud & Container Expertise: Possess hands-on experience deploying and hardening containerized environments using Docker and Kubernetes
• Systematic Problem-Solving: Apply a structured approach to solving complex technical problems, coupled with strong communication skills and a deep sense of ownership
• AI Fluency: Utilize modern AI tools and techniques to optimize security workflows, from code analysis to threat detection

Desirable

• At Hyperscience, we're building a new class of enterprise software that reads and understands the world's documents. As a Senior Product Security Engineer, you will be the cornerstone of our product security efforts, safeguarding the complex, machine-learning-powered platform that our customers trust
• This is a role for a builder and a strategist. You won't just be checking boxes; you'll be embedded within our engineering organization, shaping our security posture from the ground up. You will have the autonomy to design, implement, and automate security controls for a cutting-edge AI product
• You'll partner directly with developers, review new features before they ship, and become the go-to expert for securing our code and infrastructure
• Product Security Strategy: Implement and mature a software assurance model that embeds security into the earliest stages of our development lifecycle
• Security Design Reviews: Analyze new features and product releases, performing threat modeling and providing actionable guidance to engineering teams
• Vulnerability Management: Triage external security inquiries, perform manual code reviews to identify flaws, and advise developers on effective remediation techniques
• Automated Defenses: Design and deploy automated controls using open-source tools to detect, alert, and respond to common attacks against our cloud platform
• Security Knowledge Share: Facilitate internal training and workshops on security best practices, raising awareness and fostering a security-first culture across the organization