Artificial Intelligence, SaaS, Content Creation, Marketing Technology

Staff Product Security Engineer

Palo Alto, CAHybridFull TimeStaff$210,000–$240,000 /yrPosted 19 days agoVisa sponsorship available

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

product security
AI platform
secure design reviews
threat modeling
vulnerability remediation
SAST
DAST
dependency scanning
secrets detection
CI/CD

Nice to have

OSCP
OSWE
GWAPT
CSSLP

Role summary

We are seeking a Staff Product Security Engineer to lead the security of our core AI platform. You will embed security throughout the product lifecycle, from design to shipping, ensuring the protection of enterprise customer data and brands. This role involves leading security design reviews, threat modeling, identifying and remediating vulnerabilities, building security tooling (SAST, DAST, etc.) within CI/CD pipelines, and securing AI/generative AI features against emerging risks. You will also perform code reviews, penetration tests, manage bug bounty programs, and collaborate with Product, Engineering, and Compliance teams. The ideal candidate has 10+ years of experience in product or application security, deep knowledge of web application security, and experience with cloud-native environments. Programming skills in Python, TypeScript, Go, or Java are required. Experience securing AI/LLM applications is a plus.

About TypefaceWe help the world’s biggest brands move from brief to fully personalized campaigns — in days, not months.

Founded by Abhay Parasnis and backed by Microsoft, GV, Salesforce, Lightspeed, Madrona and Menlo, we’re building category-defining technology at the intersection of creativity and AI with real impact. Join us to help shape the future of enterprise marketing.

What You’ll Do

We’re looking for a Staff Product Security Engineer to help lead the security of our core AI platform. You’ll embed security into every stage of how we design, build, and ship products — so the enterprise marketers who rely on Typeface can turn ideas into personalized campaigns with full confidence that their brands, content, and data are protected.

This is your chance to shape how a fast-growing AI company builds secure products — not just by finding vulnerabilities, but by creating the frameworks, tooling, and secure-by-design practices that help every engineer ship safer code, faster.

How You’ll Make an Impact:

Lead security design reviews and threat modeling for new features and core product experiences – from early architecture to production launch

Identify, triage, and drive remediation of vulnerabilities across our web applications, APIs, and services

Build and scale security tooling in the development lifecycle, including SAST, DAST, dependency scanning, and secrets detection in CI/CD

Assess and secure AI and generative AI features against emerging risks such as prompt injection, data leakage, and model misuse

Perform hands-on code reviews and penetration tests, and manage our bug bounty and external testing programs

Collaborate closely with Product, Engineering and Compliance partners to balance security with speed and a great user experience

Create secure coding guidelines and training that raise the security bar across engineering

Mentor and support engineers, helping to shape a strong, security-first engineering culture

What You Bring:

10+ years of experience in product security, application security, or software engineering, with a strong track record of securing products at scale

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems or a related field, or equivalent practical experience

Deep knowledge of web application and API security, including the OWASP Top 10 and common vulnerability classes

Proven experience with threat modeling, secure architecture reviews, and hands-on code review

Strong programming skills in one or more languages such as Python, TypeScript/JavaScript, Go, or Java

Experience integrating security tooling into CI/CD pipelines and cloud-native environments (AWS, Azure, or GCP)

Excellent communication skills and the ability to thrive independently and in collaborative teams

Experience supporting B2B or enterprise SaaS products

Bonus: Background securing AI, LLM, or generative AI applications

Bonus: Industry certifications such as OSCP, OSWE, GWAPT, or CSSLP

Location

This is a hybrid role based in Palo Alto, CA. We collaborate in-office 3 days a week.

Base Salary

The range for this role is $210,000-$240,000 plus equity. Actual compensation may vary based on level, experience, and skillset as assessed in the interview process.

Benefits

Competitive compensation — including salary, equity, and 401(k)

Full medical, dental, and vision insurance for you and your family

HSA and FSA options to support your financial wellness

Flexible time off — including parental leave

Well-being programs — resources to support your mental and physical health

Daily lunch & snacks

Mentorship & impact — work closely with top AI leaders on products that ship

Equality Opportunity StatementWe welcome and encourage applicants from all backgrounds. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, medical condition, veteran status, or any other legally protected status. We comply with applicable laws in every jurisdiction where we operate.

Why You’ll Love Working Here

Build something big — Be part of a fast-growing startup defining a new category: marketing orchestration powered by Agentic AI.

Your work will matter — Trusted by Fortune 100 companies, our platform delivers 10x content velocity and 90% faster campaigns.

A+ team — Collaborate with veterans from Meta, Amazon, Adobe, Google, Microsoft, and top AI companies.

Backed by the best — GV, Salesforce Ventures, Microsoft, Lightspeed, Madrona and Menlo ($165M raised).

Recognized for innovation — TIME Best Inventions, Fast Company Next Big Thing in Tech, Gartner Cool Vendor, Adweek AI Company of the Year, LinkedIn Top Startup, Webby Award (AI Work & Productivity).

Ready to apply?

You'll be redirected to Typeface's application page.