Senior Product Security Engineer
About Persona
Persona is the configurable identity platform built for businesses in a digital-first world. Verifying individuals and organizations is harder - but more important - than ever, with AI enabling fraudsters to launch sophisticated accounts at scale and regulations evolving rapidly.
We’ve built Persona to support practically every use case and industry - that’s why we’re able to serve a wide range of leading companies. For example, Reddit relies on Persona for age assurance and verification to comply with online safety regulations, protecting younger users while maintaining a seamless experience. Meanwhile, OpenAI relies on Persona to keep bad actors out, protecting one of the world’s most powerful AI platforms from large-scale abuse in a time when AI is reshaping the way we work and live.
We’re growing rapidly and looking for exceptional people to join us!
About the Role
Persona builds identity verification infrastructure where security isn't a layer we add later, it's core to everything we ship. When security fails at most companies, systems go down. At an identity verification company, real people's identities are compromised.
As AI tooling expands what engineers can build and how fast they can build it, the attack surface grows with it. Someone proactively needs to own that problem.
What you'll work on
This is a product security role embedded in a generalist security team. Right now that means:
Drive the full vulnerability lifecycle and how Persona responds to external threats.
Design and build autonomous systems and AI tooling that scale security across every team and product
Partner with product engineers to shape how new features and systems get built securely
Shape Persona's presence in the security research community - running the bug bounty program that powers it
Must-haves
6+ years of software engineering experience
3+ years in product security
You've translated security risk into product decisions with non-technical stakeholders
You've embedded security into an eng team's SDLC without becoming the team that says no to everything
Nice to have
Familiarity with SAST/DAST tooling, dependency scanning, or bug bounty programs
Compliance experience (SOC 2, HIPAA) in a cloud-native environment
You've built systems where data sensitivity wasn't an afterthought - HIPAA, financial data, identity, etc.
The team
Small and senior by design. High ownership from day one - this isn't a team where your work disappears into a large org.
Based in SF. Relocation assistance available.
Benefits and Perks
For full-time US-based employees (excluding internship and contractor opportunities), Persona offers a wide range of benefits, including medical, dental, and vision, 3% 401(k) contribution, unlimited PTO, quarterly mental health days, family planning benefits, professional development stipend, wellness benefits, among others.
For full-time UK employees, Persona offers a wide range of benefits, including private medical insurance, dental insurance, a 6% employer pension contribution, unlimited PTO, a monthly wellness stipend, professional development stipend, co-working stipend, and more.
As part of our interview process, all candidates will be asked to verify their identity with Persona. This step is used solely to confirm that candidates are who they say they are, and will have no impact on hiring decisions.