Product Security Engineer

Responsibilities

• Identify and close gaps across application security, secure design review, and vulnerability management
• Conduct threat modeling, secure design reviews, and code reviews to identify remediation paths
• Partner with engineering teams to provide product-focused security expertise
• Improve security posture through scalable mechanisms like tooling, automation, and secure defaults
• Support security incident response by triaging and investigating product and platform issues
• Participate in security on-call rotations
• Manage and mature bug bounty and vulnerability disclosure processes

Requirements

• Strong experience in product security, application security, or security engineering
• Experience with cloud-native, developer tools, SaaS, platform, or infrastructure products
• Deep understanding of application security fundamentals (auth, session management, APIs, secrets handling)
• Experience with vulnerability triage, bug bounty programs, or incident response
• Ability to communicate clearly in a written, asynchronous environment
• Interest in or experience with Postgres and Kubernetes

Benefits

• Fully remote work with global hiring
• ESOP (equity ownership)
• Tech allowance for home office setup
• 100% covered health insurance for employees
• Annual company off-sites
• Flexible, asynchronous work environment
• Annual professional development allowance

About the Company

Supabase is an open-source-first platform with a globally distributed team of over 280 members across 55+ countries.