10 hours ago
Base Salary
$210k - $240k/yr
Responsibilities
- Lead security design reviews and threat modeling from architecture through production launch.
- Identify, triage, and drive remediation of vulnerabilities across web applications, APIs, and services.
- Build and scale SAST, DAST, dependency scanning, and secrets-detection security tooling in development workflows.
- Assess and secure AI and generative AI features against prompt injection, data leakage, and model misuse.
- Perform code reviews and penetration tests, and manage bug bounty and external testing programs.
- Create secure coding guidelines and training while mentoring engineers and strengthening security culture.
- Collaborate with Product, Engineering, and Compliance teams to balance security, delivery speed, and user experience.
Requirements
- 10+ years of experience in product security, application security, or software engineering, with a record of securing products at scale.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
- Deep knowledge of web application and API security, including the OWASP Top 10 and common vulnerability classes.
- Experience with threat modeling, secure architecture reviews, hands-on code review, security tooling integration, CI/CD pipelines, and cloud-native environments.
- Strong programming skills in one or more of Python, TypeScript/JavaScript, Go, or Java.
- Experience supporting B2B or enterprise SaaS products.
- Excellent communication skills and ability to work independently and collaboratively.
- Experience securing AI, LLM, or generative AI applications is a bonus.
- OSCP, OSWE, GWAPT, or CSSLP certifications are bonuses.
Benefits
- Base salary range of $210,000-$240,000 plus equity.
- Hybrid role based in Palo Alto, California, with in-office collaboration 3 days per week.
- 401(k), medical, dental, and vision insurance for employees and families, plus HSA and FSA options.
- Flexible time off, including parental leave, and well-being programs.
- Daily lunch and snacks, mentorship, and opportunities to work with AI leaders.
Categories
About Typeface
Typeface builds an enterprise marketing orchestration platform that uses generative AI, governed agents, and shared brand intelligence to plan, produce, and manage on-brand content across channels. Its suite includes Arc Graph, Arc Forge, Arc Agents, and Arc Spaces, with integrations to Salesforce, Microsoft, and Google; it sells on a SaaS basis to large organizations. Founded in 2022 and headquartered in Palo Alto, the company counts ASICS and Johnson Controls among its customers.