Staff Product Security Engineer

About the Company

Tools for Humanity (TFH) designs and builds technology behind World. World is building a real human network designed to accelerate people in the age of AI. The TFH and World tech stacks make this possible through the Orb, World ID, and World App, adding a human layer to an AI-driven internet.

Responsibilities

• Lead secure architecture reviews and threat modeling sessions for new application and cloud services
• Engineer and implement automated security guardrails and reusable libraries
• Perform deep-dive, security-focused code and infrastructure reviews in Rust, Go, and Python
• Own the vulnerability management process, including bug bounty triage and remediation
• Mature and scale the Secure SDLC and bug bounty programs

Requirements

• 12+ years of hands-on experience in Product Security, Application Security, or Cloud Security
• Proficiency in code review and development in Rust, Go, and Python
• Extensive experience securing modern AWS architectures and infrastructure-as-code (Terraform, CDK)
• Expertise in leading threat modeling sessions
• Strong background in implementing security tooling (SAST, DAST, SCA) within CI/CD pipelines
• Deep understanding of web and API security principles (OWASP Top 10)

Preferred Qualifications

• Experience scaling a security champions program
• Expertise in Kubernetes (EKS) and container security
• Interest in securing mobile applications or smart contracts

Benefits

• Healthcare, dental, and vision
• 401(k) plan and match
• Life insurance
• Flexible time off
• Commuter benefits
• Professional development stipend