Product Security Engineer

About the role

StackAI is building a no‑code AI workflow platform and needs a senior Product Security Engineer to design, build, and harden the secure architecture at the core of the product. You will work closely with the Core engineering lead, writing production code and owning security‑critical systems that the whole platform depends on.

Key responsibilities

• Own encryption and signing, including KMS, BYOK, envelope encryption, and signing pipelines across cloud and on‑prem deployments.
• Protect the most sensitive customer data by extending PHI/PII scrubbing and strengthening data‑protection foundations.
• Secure the storage layer through encryption at rest and tenant isolation.
• Maintain and expand secure‑by‑default templates and reference implementations embedded in the SDLC.
• Lead threat‑modeling of platform seams such as the execution engine, connector trust boundaries, and multi‑tenant isolation.
• Improve security tooling and CI enforcement to ensure critical findings never reach production.
• Act as the technical point of contact for audit, compliance, and incident‑response requirements.

Required profile

• 4+ years building security‑critical systems in production, with hands‑on implementation experience.
• Deep practical knowledge of cryptography, key management, encryption, and signing.
• Strong judgment in secure architecture and ability to work as a technical peer with senior engineers.
• Experience with multi‑tenant SaaS isolation and regulated data‑isolation guarantees.
• Proficiency in secure coding using Python on the backend and TypeScript/Node.js on product surfaces.
• Comfortable integrating security checks and gates into CI/CD pipelines.

Required skills

• Python
• TypeScript
• Node.js
• Cryptography
• Key management (KMS, BYOK)
• Encryption and signing
• CI/CD pipelines
• Cloud platforms (GCP, Azure, AWS)