← All roles

Product Security Engineer

WorkOS· Engineering
Apply on company site
RemoteFull-timePosted 3w ago

About the role

Security-focused role building secure-by-default systems, performing offensive security testing, and partnering with engineering to protect WorkOS products. Remote, US & Canada-based.

Responsibilities

  • Lead secure design efforts. Partner with engineering teams on secure design and code reviews. Identify and prioritize risks early in the product lifecycle.
  • Build secure by default systems. Develop paved paths that systemically reduce risk and make secure development the easiest path for engineers.
  • Perform offensive security testing. Conduct penetration tests and code audits on new and existing products from an adversarial lens.
  • Improve our security tooling. Integrate and improve our static analysis, supply chain security, and vulnerability management capabilities across engineering pipelines.
  • Operate our responsible disclosure program. Run and improve our program by furthering automation, validating submissions, and coordinating remediation.
  • Improve our products. Write and ship code to remediate vulnerabilities in production systems and improve the security posture of WorkOS products.
  • Work directly with customers. Help build our customers' trust by directly engaging with their security-related questions and concerns.

Qualifications

  • 5+ years of experience in a security engineering or security-focused software engineering role.
  • Ability to execute across a wide range of security functions such as security assessments, penetration testing, responsible disclosure, security tooling integration, etc.
  • Familiarity with and experience using common industry tooling.
  • Proven ability to identify vulnerabilities in software, demonstrated through CVEs, bug bounty, blog posts, or prior work experience.
  • Strong written and verbal communication skills, particularly in partnering with engineering teams.
  • Comfortable reading and writing code, and able to effectively leverage AI during the process.
  • Bonus: Experience in the authentication and identity domain.
  • Bonus: Experience writing production level code, especially developing security features.

Skills

Required:Security design and code reviewOffensive security testingSecurity tooling integrationCommunication with engineering teams

Benefits

  • 401k matching
  • Competitive Equity
  • Healthcare, dental and vision coverage
  • FSA, ST/LT Disability, Voluntary Life
  • Carrot fertility benefits
  • 20 days paid vacation + 10 holidays + unlimited sick leave
  • 12 weeks fully paid parental leave
  • Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active
  • Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being
  • Commuter benefits for hybrid employees in SF/NYC
  • Unlimited token usage!
Last updated Sep 28, 2026. Interested? Apply on the company site.

About WorkOS

Your app, Enterprise Ready.

Developer APIs/SDKs for Enterprise Ready features like Single Sign-On, Directory Sync, Audit Logging, and more. Get started for free.

APIsSDKsSingle Sign-OnDirectory SyncAudit LoggingEnterprise Features
Company profileWebsite

More open roles at WorkOS