Product Security Engineer

About Typeface
We he lp the world’s biggest brands move from brief to fully personalized campaigns — in days, not months.

Founded by Abhay Parasnis and backed by Microsoft, GV, Salesforce, Lightspeed, Madrona and Menlo, we’re building category-defining technology at the intersection of creativity and AI with real impact. Join us to help shape the future of enterprise marketing.

We’re looking for a Staff Product Security Engineer to help lead the security of our core AI platform. You’ll embed security into every stage of how we design, build, and ship products — so the enterprise marketers who rely on Typeface can turn ideas into personalized campaigns with full confidence that their brands, content, and data are protected.

This is your chance to shape how a fast-growing AI company builds secure products — not just by finding vulnerabilities, but by creating the frameworks, tooling, and secure‑by‑design practices that help every engineer ship safer code, faster.

• Lead security design reviews and threat modeling for new features and core product experiences – from early architecture to production launch
• Identify, triage, and drive remediation of vulnerabilities across our web applications, APIs, and services
• Build and scale security tooling in the development lifecycle, including SAST, DAST, dependency scanning, and secrets detection in CI/CD
• Assess and secure AI and generative AI features against emerging risks such as prompt injection, data leakage, and model misuse
• Perform hands‑on code reviews and penetration tests, and manage our bug bounty and external testing programs
• Collaborate closely with Product, Engineering and Compliance partners to balance security with speed and a great user experience
• Create secure coding guidelines and training that raise the security bar across engineering
• Mentor and support engineers, helping to shape a strong, security‑first engineering culture

• 10+ years of experience in product security, application security, or software engineering, with a strong track record of securing products at scale
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems or a related field, or equivalent practical experience
• Deep knowledge of web application and API security, including the OWASP Top 10 and common vulnerability classes
• Proven experience with threat modeling, secure architecture reviews, and hands‑on code review
• Experience integrating security tooling into CI/CD pipelines and cloud‑native environments (AWS, Azure, or GCP)
• Excellent communication skills and the ability to thrive independently and in collaborative teams
• Experience supporting B2B or enterprise SaaS products
• Bonus:
  Background securing AI, LLM, or generative AI applications
• Bonus:
  Industry certifications such as OSCP, OSWE, GWAPT, or CSSLP

This is a hybrid role based in Palo Alto, CA. We collaborate in‑office 3 days a week.

The range for this role is $210,000-$240,000 plus equity. Actual compensation may vary based on level, experience, and skillset as assessed in the interview process.

• Competitive compensation — including salary, equity, and 401(k)
• Full medical, dental, and vision insurance for you and your family
• HSA and FSA options to support your financial wellness
• Flexible time off — including parental leave
• Well‑being programs — resources to support your mental and physical health
• Daily lunch & snacks
• Mentorship & impact — work closely with top AI leaders on products that ship

Equality Opportunity Statement
We welcome and encourage applicants from all backgrounds. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, medical condition,…