Skip to content
RipplingRipplingSan Francisco, CA

Senior Product Security Engineer

Hands-on security engineer building product security guardrails, tooling, and SDLC integrations for a multi-product HR/IT/Finance platform. Requires 5+ years in product security, fluency in Python/React/DRF, and experience leading cross-team vulnerability remediation.

151k – 280k
Hybrid5+ YOESecurity Engineering

About the role

What You'll Do

  • Build guardrails and controls to eliminate full classes of vulnerabilities within the Rippling application
  • Build security tooling and automations to help scale the Product Security team’s practices
  • Threat-model application designs and solutions and provide security assessments
  • Audit source code and perform code review for critical application changes
  • Mentor software engineering teams in security best practices
  • Provide hands-on remediation guidance to development teams
  • Review & establish software development practices that make security an essential part of the development process
  • Develop / Integrate security into the Software Development Life Cycle

Qualifications

  • 5+ years of experience in a product security role
  • Experience leading architectural changes or complex cross team efforts to mitigate security vulnerabilities
  • Deep understanding of securing web applications
  • Fluency in Python, React, and Django Rest Framework
  • Experience with manual source code review, and embedding security to code in production environments
  • Experience with deploying application security tools in the CI/CD pipeline
  • Experience with securing software development lifecycle including building programs that eliminate full classes of vulnerabilities

Bonus Points

  • Good understanding of SSO, including OAUTH, SAML
  • Experience with speaking at meetups or conferences
  • Experience running a bug bounty program

Skills

PythonReactDjango Rest FrameworkCI/CDApplication SecurityThreat ModelingCode ReviewSSOOAuthSAMLBug Bounty

Similar roles

Security Engineering jobs
Grow Therapy

Senior Engineer, Security

Grow TherapyNew York, NY +2

Senior Security Engineer owning data security infrastructure including classification, masking, encryption, and AI data pipelines. Hands-on builder who defines and executes the data protection roadmap.

152k – 250k
Remote5+ YOESecurity Engineering
Cardless

Fraud Strategy Manager / Senior Manager (Onboarding)

CardlessSan Francisco, CA

Owns end-to-end fraud strategy for applicant onboarding, including manual review, alternative data signals, rules development, and performance monitoring. Requires 5-10 years in fraud/credit risk, strong SQL, and expertise in onboarding fraud vectors.

150k – 210k
On-site5+ YOESecurity Engineering
Square

Senior Security Engineer, Security Engineering & Operations

SquareSan Francisco, CA

Design and build scalable cloud-native security data pipelines and detection systems. Collaborate on detection engineering and Kubernetes security controls while participating in on-call rotations.

153k – 270k
On-site5+ YOESecurity Engineering
1Password

Senior Security Engineer, GRC Automation

1PasswordUnited States

Senior Security Engineer focused on GRC automation: building AI-assisted workflows, Drata integrations, and compliance automation infrastructure for SOC 2, ISO 27001, and NIST frameworks.

153k – 214k
Remote5+ YOESecurity Engineering
1Password

Senior Developer, Product Security

1PasswordUnited States

Senior security-focused developer implementing new security features and secure libraries for iOS and hybrid apps at 1Password. Requires 5+ years of security development experience, 3+ years with iOS and Rust.

153k – 214k
Remote5+ YOESecurity Engineering