Staff Product Security Engineer
Tools for Humanity is a technology company building products for humans in the age of AI.
About Tools for Humanity
Tools for Humanity develops hardware, software, and services connected to World, described as an open-source real-human network. Its products include the Orb for privacy-focused proof-of-human verification, World App for World ID access, digital asset management, wallet functionality, transactions, and Mini Apps, and World Spaces for verification, community programming, and events. The company serves end users and organizations seeking to integrate World infrastructure into their projects.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will serve as a hands-on technical leader safeguarding products and services. You will lead architecture reviews and threat modeling, develop AI-enabled security automation, review code and infrastructure, manage vulnerabilities and bug bounty submissions, and strengthen Secure SDLC practices.
Requirements
- 6+ years of hands-on Product Security or Application Security experience
- Experience building and operating AI-agent security automation pipelines
- Proficiency in code review and development with Rust, Go, and Python
- Experience securing modern AWS architectures and developing secure infrastructure as code with Terraform and CDK
- Ability to assess exploitability, prioritize security risks, and communicate practical tradeoffs to engineering teams
- Experience implementing and managing SAST, DAST, and SCA tooling in CI/CD pipelines
- Understanding of web and API security principles, including OWASP Top 10
- Experience securing distributed mobile-first systems
Responsibilities
- Lead secure architecture reviews and threat-modeling sessions for new applications and services
- Build and operate AI-agent security automation pipelines for vulnerability detection, triage, code review, and remediation
- Engineer automated security guardrails and reusable tools and libraries
- Perform security-focused code and infrastructure reviews in Rust, Go, and Python
- Own vulnerability management from bug bounty triage through remediation
- Mature and scale Secure SDLC and bug bounty programs
Benefits
- Healthcare
- Dental insurance
- Vision insurance
- 401(k) plan and match
- Life insurance
- Flexible time off
- Commuter benefits
- Professional development stipend
