Base Salary
$150k - $220k/yr
Responsibilities
- Drive the full vulnerability lifecycle and Persona’s response to external threats.
- Design and build autonomous systems and AI tooling that scale security across products and teams.
- Partner with product engineers to shape secure feature and system development.
- Run the bug bounty program and strengthen Persona’s presence in the security research community.
Requirements
- At least 4 years of software engineering experience.
- At least 2 years of product security experience.
- Experience translating security risk into product decisions for non-technical stakeholders.
- Experience embedding security into an engineering team’s software development lifecycle.
- Familiarity with SAST/DAST tooling, dependency scanning, or bug bounty programs is preferred.
- Compliance experience with SOC 2 or HIPAA in a cloud-native environment is preferred.
- Experience building systems involving highly sensitive data such as healthcare, financial, or identity data is preferred.
Benefits
- Medical, dental, and vision insurance.
- 3% 401(k) contribution.
- Unlimited paid time off and quarterly mental health days.
- Family planning benefits, wellness benefits, and a professional development stipend.
- Full-time role based in San Francisco with relocation assistance available.
Categories
About Persona
Persona helps businesses manage KYC/AML/KYB programs, fight fraud, and build trust by automating any identity-related use case with our flexible identity infrastructure. For example, we help Coursera verify learners’ identities before delivering course credentials and Brex comply with strict international KYC/AML regulations. Beyond securely collecting and verifying user information such as PII, government IDs, and selfies, our platform also provides flexible case review and orchestration tools to help businesses streamline and automate all their identity operations — from setting custom rules to ingesting third-party data and triggering external actions. In short, Persona handles the complexities of securely collecting, verifying, and managing sensitive personal information, so you can stay focused on building your product.