Product Security Engineer

Joins the WorkOS Security team, responsible for safeguarding the identities and data of a very large end-user base, as a hands-on product security engineer. The engineer leads secure design and code reviews with engineering teams, builds paved paths that make secure development the default, attacks current and upcoming products through penetration testing and code audits, improves static analysis, supply chain and vulnerability management tooling, operates the responsible disclosure program, ships code that fixes vulnerabilities, and answers customers' security questions directly. WorkOS wants five or more years in security engineering or security-focused software engineering, a record of finding real vulnerabilities through CVEs, bug bounties or similar, comfort with code and AI tools, and ideally identity and authentication experience. Remote in the US or Canada.