Product Security Engineer — Own AppSec at the 7M-Developer Postgres Platform (Remote, Worldwide)
The Role in One Line
Supabase — the Postgres development platform trusted by 7M+ developers — is looking for a Product Security Engineer to bake security into products, platform, and engineering workflows as the company scales.
What You'll Own
You'll work shoulder-to-shoulder with software engineers, infrastructure teams, and technical leadership to shrink risk early in the development lifecycle and ship securely by default. Concretely:
- Close gaps across application security, secure design review, and vulnerability management
- Run threat modeling, secure design reviews, and code reviews with practical remediation paths
- Partner with engineering to shape a modern, developer-first security program
- Separate theoretical risk from material business risk and prioritize accordingly
- Build security through scalable mechanisms: tooling, automation, secure defaults, developer-friendly guardrails
- Support incident response — triage, investigate, and coordinate fixes for product and platform issues
- Mature the bug bounty and vulnerability disclosure process end-to-end
- Participate in security on-call rotations with calm, clear judgment
Who We're Looking For
- Strong product/application security or security engineering background
- Comfort with cloud-native, developer tools, SaaS, platform, or infrastructure products
- Clear async written communication across technical and non-technical audiences
- Deep understanding of auth, session management, APIs, secrets handling, and appsec fundamentals
- Experience with vulnerability triage, bug bounty, responsible disclosure, or incident response
- Bonus: Postgres, Kubernetes, or security guardrails that enable rather than enforce
Why Supabase
Fully remote with global hiring — do your best work from anywhere, plus a WeWork membership or co-working allowance. ESOP for every team member, tech allowance, 100% health insurance (80% for dependents), annual company off-sites in a new city, and an education allowance for professional development.
If you care about making security a speed enabler rather than a blocker for builders, this is the role.
🚀 Ready to Apply?
Similar Roles