Staff Product Security Engineer (Security)

Responsibilities

• Product Security Ownership
• Partner with engineering teams to identify and address security risks across Phantom’s mobile applications, web products, APIs, and backend services.
• Architecture and Threat Modeling
• Lead security reviews for new products and major architectural changes, with particular attention to authorization boundaries, sensitive data, transaction integrity, key material, and third-party integrations.
• Secure Product Development: Embed practical security controls into the software development lifecycle, from design and implementation through testing, release, and production operation.
• Code Review and Security Testing: Perform AI assisted security code reviews and targeted testing of high-risk features.
• Build repeatable approaches that help find vulnerabilities before they reach production.
• Security Tooling
• Develop and improve tooling that gives engineers fast, actionable security feedback without creating unnecessary friction. Use automation and AI-assisted workflows where they materially improve coverage or speed.
• Software Supply Chain Security: Harden CI/CD, build, and release systems against supply chain threats, including dependency risk, secrets exposure, build provenance, artifact integrity, and compromised developer or automation workflows.

Languages