{"id":68437,"url":"https://alion.io/job/stackai-product-security-engineer","title":"Product Security Engineer","company":{"id":38249,"name":"Stack AI","domain":"stackai.com","url":"https://alion.io/company/stackai","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"D","score":54,"open_postings":21,"ghost_share":0.762,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":260000,"max":350000,"currency":"PLN","period":"year","gross":null,"usd_annual":89688},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Rest API","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Asana","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"GCP","optional":true},{"name":"JavaScript","optional":true},{"name":"LLM","optional":true},{"name":"Node JS","optional":true},{"name":"Python","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-06-30T21:52:42Z","employer_posted_date":"2026-06-30","last_verified_at":"2026-10-16T14:35:59Z","board_verified":true,"closed_at":null,"days_open":107,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":107},"description":"About the Company\nStackAI (by Asana) is a no-code AI workflow platform that empowers companies to build, deploy, and scale AI-powered workflows easily. With thousands of users and rapidly growing enterprise adoption, our mission is to democratize access to LLMs and bring AI into the hands of every business operator, not just developers. An Asana Company, we're building the foundational platform for the AI-driven future of work\nAbout the role\nAt StackAI, security is how we earn the trust of the enterprises building AI assistants on our platform. We're hiring a hands-on (Senior) Product Security Engineer to design, build, and harden the secure architecture at the core of the product, working as a technical partner to our Core engineering lead.\nThis is a hands-on engineering role. You'll write production code and own the security-critical systems the whole platform depends on: encryption and key management, customer data protection, and how security is built into the way every team ships.\nIf you want deep ownership of these systems and the chance to harden and scale them as the platform grows, we'd love to meet you.\nWhat you'll do\nOwn encryption and signing. Take ownership of our KMS, key management, BYOK, envelope encryption, and signing pipeline across both cloud and on-prem deployments-operating, hardening, and evolving them as the platform scales.\n\nProtect the most sensitive customer data. Extend our PHI/PII scrubbing and strengthen the data-protection foundations that regulated enterprises already rely on.\n\nSecure the storage layer. Own encryption at rest and tenant isolation.\n\nKeep security the default in how we ship. Maintain and expand the secure-by-default templates and reference implementations embedded in our SDLC-the ones engineers actually want to adopt.\n\nThreat-model the platform. Lead threat modeling on the seams between systems (the execution engine, connector trust boundaries, and multi-tenant isolation), using modern, AI-assisted threat-modeling tooling.\n\nRaise the bar on tooling. Push our scanning further on coverage, signal, and CI enforcement, so critical findings never reach production.\n\nBe the technical point of contact for security standards. Translate audit, compliance, and incident-response requirements into real implementation in our codebase.\n\nWhat we're looking for\n4+ years building security-critical systems in production, with significant time spent implementing, not only reviewing or assessing.\n\nPractical depth in cryptography and key management: encryption, KMS, secrets handling, and signing in real systems.\n\nSecure architecture judgment: you can design and reason about secure systems and hold your own as a technical peer with senior engineers.\n\nMulti-tenant SaaS isolation experience, including the data-isolation guarantees regulated customers require.\n\nStrong secure-coding skills in our stack: Python on the backend, TypeScript/Node.js on the product surfaces.\n\nComfortable wiring security checks and gates into CI/CD so security is enforced automatically in the pipeline.\n\nSecurity engineering is broad. If you're strong on most of this and excited to grow into the rest, we'd like to hear from you, even if you don't check every box.\nBonus points\nCloud and API security fundamentals on GCP, Azure, or AWS.\n\nSecuring on-prem, self-hosted, or air-gapped deployments.\n\nExperience in regulated domains (healthcare/PHI, finance, etc.).\n\nFamiliarity with AI/LLM platform security: agent execution, connector trust boundaries, prompt and tool-call risk.\n\nStartup or growth-stage experience.","description_format":"text","description_chars":3566,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Agents","AI Development Tools","Low-Code & No-Code Platforms"],"lifecycle":[{"event":"open","at":"2026-06-30T21:52:42Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.285,"p_room":0.28,"age_days":107,"expected_fill_days":30,"reasons":["conf:0","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":89688,"is_top_pay":false},"html_url":"https://alion.io/job/stackai-product-security-engineer","json_url":"https://alion.io/job/stackai-product-security-engineer.json","meta":{"generated_at":"2026-10-16T15:42:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15575,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":38249},"rest":"https://alion.io/mcp/rest/get_company?id=38249"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstackai-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstackai-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstackai-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stackai-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstackai-product-security-engineer"}]}