Product Security Senior

What you'll do

• Lead threat modeling and security design reviews for platform integration pathways, connectors, APIs, and service-to-service connectivity.
• Review source code and trace authentication, integration, and access-control risks to root causes; partner with teams to resolve them and promote secure-by-default patterns.
• Advise on trust boundaries, authentication, and connector security, and coach junior security engineers.

What they ask for

• Hands-on experience securing backend, integration, or service-connectivity systems, including API security and secure code review.
• Advanced knowledge of authorization, permission/scope models, and service-to-service authentication; working familiarity with OAuth 2.0, OIDC, and JWT.
• Ability to review Java and at least one of JavaScript/TypeScript, Python, or Go, including large or legacy codebases.
• 5+ years in product, application, or platform security, independently handling moderately to highly complex problems.

Nice to have

• Experience securing eventing, messaging, integration, or API platforms at scale.
• Hands-on connector security, agent integration, or MCP experience; multi-tenant SaaS backend security architecture or embedded product security expertise.

Pay

$148,500 - $223,900 annually (base salary); $178,900 - $246,000 annually (base salary)

Tools

Java, JavaScript/TypeScript, Python, Go, REST/GraphQL, OAuth 2.0, OpenID Connect (OIDC), JSON Web Tokens (JWT)

AI focus

Secures agent and Model Context Protocol (MCP) connectors and integrations that connect external tools and models to the platform; the posting also states that AI tools assist recruiters in assessing candidates.