Product Security Engineer, North Security

Responsibilities

• Lead security reviews. Review architecture, code, and security-sensitive changes.
• Identify both individual vulnerabilities and the recurring design patterns behind them.
• Secure AI-powered products. Evaluate risks such as prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and sandbox escapes.
• Threat model new capabilities.
• Identify trust boundaries, abuse cases, and high-impact failure modes before implementation.
• Translate findings into practical, prioritized mitigations.
• Perform hands-on testing. Investigate suspected vulnerabilities, develop proofs of concept, assess exploitability and impact, and partner with engineers through remediation.
• Build scalable guardrails.
• Develop secure defaults, approved patterns, reusable controls, review requirements, and automated checks that reduce recurring risks.
• Strengthen engineering capability. Pair with engineers, document practical guidance, and help product teams develop durable security expertise.

Languages