Staff Product Security Engineer
Core
Technical core of the bug bounty program, owning reports from intake through resolution, reproducing vulnerabilities, assessing severity, and designing fixes.
Role type
Staff Product Security Engineer (Bug Bounty & PSIRT)
Builds
Verified fixes for product vulnerabilities and secure SDLC practices
Domain
Enterprise Software / Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability reproduction, severity assessment, root cause analysis, code review, remediation design, coordinated vulnerability disclosure, Java, JavaScript, Python, Git, CI/CD pipelines, AI coding assistants
Preferred skills
Variant hunting, original platform security research, forensic postmortems, technical mentorship
Technologies
Java, JavaScript, Python, Git, Gradle, Maven, CI/CD pipelines, Claude Code
Responsibilities
Triage and resolve bug bounty reports end-to-end, reproduce and validate vulnerabilities, serve as technical escalation point for complex reports, conduct variant hunts, perform original platform security research, lead major product security incidents, run forensic postmortems, mentor earlier-career engineers
Seniority
Staff, hands-on IC with mentorship
