What you'll be doing

Partner with product and engineering teams throughout the software development lifecycle to embed security into Asana's products and platform.
Conduct security architecture reviews, threat modeling, and code reviews for new features and services.
Develop and maintain secure-by-default frameworks and libraries for engineering teams.
Build and maintain automated security tooling including static and dynamic analysis rules and automated red-teaming.
Identify and mitigate AI-specific security risks such as prompt injection and insecure tool permissions.
Triage and remediate vulnerabilities from bug bounty programs, internal testing, and automated tools.
Influence engineering design and roadmap by communicating security constraints and assisting in trade-offs.
Investigate product security incidents using logs and monitoring tools to contain and resolve issues.
Evaluate and improve software supply chain security, including dependency management and third-party risk.
Develop and deliver training on secure coding best practices and emerging threats.
Stay informed on industry trends and collaborate on risk management strategies.

Requirements

5+ years of experience in application security, product security, or software engineering focused on security.
Strong software engineering skills with experience in Python, JavaScript/TypeScript, or Scala.
Deep knowledge of OWASP Top 10 and common web vulnerabilities like XSS, CSRF, SSRF, and SQL injection.
Familiarity with AI/ML security concepts, including Large Language Model-specific risks such as prompt injection.
Experience with security tools for static/dynamic analysis, software composition analysis, and vulnerability management.
Experience performing security design reviews and threat modeling for complex applications.
Excellent communication skills for working with technical and non-technical partners.
Pragmatic and collaborative mindset with a passion for building real-world attack defenses.
Demonstrated curiosity about AI tools and emerging technologies and eagerness to learn and apply them.

Generous, transparent, and fair compensation package including base salary and RSUs.
Contract of Employment with option for tax deductible costs for author's rights usage.
Health insurance with dental and travel coverage (Lux Med).
Breakfast and lunch catering on in-office days.
Vacation allowance.
Career growth budget.
Home office setup budget.
Gym/Fitness card.
Fertility healthcare and family-forming support with Carrot.
Mental health support through Modern Health.
Group life insurance.
MacBooks with necessary accessories provided.