Product Security Engineer

WorkOS sells the authentication, identity and authorisation infrastructure other companies use to become enterprise ready, and its customers include OpenAI, Cursor, Perplexity, Sierra and Plaid. The security team is responsible for the data and identities of hundreds of millions of end users.

This is a product security role for somebody comfortable in code: reading and writing it, understanding the products deeply enough to find subtle, high impact vulnerabilities, then designing mitigations engineers will actually adopt. The posting wants someone who thinks like an attacker and a defender in turn, and who prioritises ruthlessly rather than filing everything.

The company frames its current problem as human and agent authentication, which is to say knowing who your agents are and what they are allowed to do, so the security surface is more interesting than a standard SaaS one. WorkOS raised a $100M Series C. Remote from the United States or Canada.