Is the Staff Product Security Engineer role remote?

It's hybrid — Typeface expects some on-site time in Palo Alto, CA, United States.

What's the salary range?

Typeface lists $210,000–$240,000 for this role.

How much experience is required?

At least 10 years of relevant experience for this Staff Product Security Engineer role.

Where is the role based?

Typeface is hiring for this position in Palo Alto, CA, United States.

What's the tech stack?

Joblaze extracted these technologies from the posting: AWS, Azure, DAST, GCP, Go, Java.

What seniority level is this role?

Typeface targets staff-level candidates for this position.

Is this full-time or contract?

Full-time for this Staff Product Security Engineer role at Typeface.

Staff Product Security Engineer at Typeface

Joblaze summary

In the role of Staff Product Security Engineer at Typeface, the individual will focus on integrating security measures throughout the product development lifecycle, ensuring that the AI platform remains secure from design to deployment. Key skills include expertise in web application security, threat modeling, and proficiency in programming languages like Python and Java. This position is ideal for seasoned professionals with over a decade of experience in product security, particularly those familiar with B2B SaaS environments and emerging AI risks.

Joblaze insights

Listed today — first seen on Joblaze October 21, 2026. Last confirmed on Typeface's careers page October 21, 2026.
Salary band is above the typical range for Security roles (median ~$170,000).
Starts above 48% of 48 comparable staff security roles in United States that list Python we track (median $210,000 across 28 companies). See Python salary trends
Python appears in 45.6% of 125 comparable staff security roles in United States; SAST appears in 1.6% of 125 comparable staff security roles in United States.

Quick facts

Is the Staff Product Security Engineer role remote?: It's hybrid — Typeface expects some on-site time in Palo Alto, CA, United States.
What's the salary range?: Typeface lists $210,000–$240,000 for this role.
How much experience is required?: At least 10 years of relevant experience for this Staff Product Security Engineer role.
Where is the role based?: Typeface is hiring for this position in Palo Alto, CA, United States.
What's the tech stack?: Joblaze extracted these technologies from the posting: AWS, Azure, DAST, GCP, Go, Java.
What seniority level is this role?: Typeface targets staff-level candidates for this position.
Is this full-time or contract?: Full-time for this Staff Product Security Engineer role at Typeface.

From the original posting

About Typeface
We help the world’s biggest brands move from brief to fully personalized campaigns — in days, not months.

What You’ll Do

We’re looking for a Staff Product Security Engineer to help lead the security of our core AI platform. You’ll embed security into every stage of how we design, build, and ship products — so the enterprise marketers who rely on Typeface can turn ideas into personalized campaigns with full confidence that their brands, content, and data are protected.

This is your chance to shape how a fast-growing AI company builds secure products — not just by finding vulnerabilities, but by creating the frameworks, tooling, and secure-by-design practices that help every engineer ship safer code, faster.

How You’ll Make an Impact:

Lead security design reviews and threat modeling for new features and core product experiences – from early architecture to production launch
Identify, triage, and drive remediation of vulnerabilities across our web applications, APIs, and services
Build and scale security tooling in the development lifecycle, including SAST, DAST, dependency scanning, and secrets detection in CI/CD
Assess and secure AI and generative AI features against emerging risks such as prompt injection, data leakage, and model misuse
Perform hands-on code reviews and penetration tests, and manage our bug bounty and external testing programs
Collaborate closely with Product, Engineering and Compliance partners to balance security with speed and a great user experience
Create secure coding guidelines and training that raise the security bar across engineering
Mentor and support engineers, helping to shape a strong, security-first engineering culture

What You Bring:

10+ years of experience in product security, application security, or software engineering, with a strong track record of securing products at scale
Bachelor’s degree in Computer Science, Cybersecurity, Information Systems or a related field, or equivalent practical experience
Deep knowledge of web application and API security, including the OWASP Top 10 and common vulnerability classes
Proven experience with threat modeling, secure architecture reviews, and hands-on code review
Strong programming skills in one or more languages such as Python, TypeScript/JavaScript, Go, or Java
Experience integrating security tooling into CI/CD pipelines and cloud-native environments (AWS, Azure, or GCP)
Excellent communication skills and the ability to thrive independently and in collaborative teams
Experience supporting B2B or enterprise SaaS products
Bonus: Background securing AI, LLM, or generative AI applications
Bonus: Industry certifications such as OSCP, OSWE, GWAPT, or CSSLP

Location

This is a hybrid role based in Palo Alto, CA. We collaborate in-office 3 days a week.

Base Salary

The range for this role is $210,000-$240,000 plus equity. Actual compensation may vary based on level, experience, and skillset as assessed in the interview process.

Benefits

Why You’ll Love Working Here

Standard company text repeated across Typeface's postings is omitted here.