Platform Engineer, Product Security
Own product security end to end at Wispr Flow, a growing company focused on building a voice interface for millions of users.
Posted by employer 3 months ago
First seen on Joblaze 1 month ago
Last verified on the company career page 1 day ago
Requirements
- Visa
- Sponsorship available
Not disclosed in this posting: compensation, years of experience.
Benefits
Joblaze summary
The Platform Engineer for Product Security at Wispr Flow is responsible for overseeing the security of the product, prioritizing threats, and architecting defenses to protect user data. This role requires expertise in Python, FastAPI, and AWS, along with a strong understanding of security vulnerabilities and user experience. Ideal candidates are those who have naturally gravitated towards security roles and possess a pragmatic approach to trade-offs in technology. Wispr Flow's small team dynamic allows for significant individual impact on product development and security practices.
Joblaze insights
Quick facts
- Is the Platform Engineer, Product Security role remote?
- It's hybrid — Wispr Flow expects some on-site time in San Francisco.
- Where is the role based?
- Wispr Flow is hiring for this position in San Francisco.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: AWS, FastAPI, Gitleaks, Python, Supabase, Terraform.
- Does Wispr Flow sponsor work visas for this role?
- Yes — the posting indicates visa sponsorship is available for the right candidate.
- What seniority level is this role?
- Wispr Flow targets mid-level candidates for this position.
- Is this full-time or contract?
- Full-time for this Platform Engineer, Product Security role at Wispr Flow.
From the original posting
About the role
Wispr works with people’s private thoughts and increasingly acts on their behalf. Earning that trust requires making security a property of the product. You’ll own product security across Wispr’s agentic, client, and cloud surfaces.
What you’ll do
Rank threats across the product and drive the highest-risk issues through closure
Embed security and privacy by design into the SDLC and CI/CD pipeline
Build trusted SAST, DAST, SCA, and AI-assisted vulnerability discovery and remediation
Lead threat modeling and assessments across desktop, mobile, web, UI, and API surfaces
You may be a fit if
You’ve personally built and operated security systems other engineers depend on
You’ve owned a high-volume vulnerability queue and can separate urgent risk from noise
You have hands-on product-security experience across client and service surfaces
You’ve applied security and privacy practices throughout the development lifecycle
You treat security controls as a developer product
Voice, ML, and experience across every client platform are not required.
Get to know us
Standard company text repeated across Wispr Flow's postings is omitted here.