Product Security Engineer
Supabase · Remote
About this role
ABOUT THE ROLE We’re looking for a Product Security Engineer to join our team and help strengthen how security is built into Supabase’s products, platform, and engineering workflows as we continue to scale. You’ll work closely with software engineers, infrastructure teams, and technical leadership, helping us proactively reduce risk earlier in the development lifecycle and ship securely by default. This role is ideal for someone who thrives in async, fast-paced environments and is excited about building developer tools that scale to millions. Success in this role means improving the security posture of the product without becoming a blocker to speed, autonomy, or builder velocity. WHAT YOU’LL OWN In this role, you’ll: - Identify and close gaps across application security, secure design review, and vulnerability management. - Conduct threat modeling, secure design reviews, and code reviews to identify practical remediation paths. - Partner closely with engineering teams to provide product-focused security expertise and shape a modern security program. - Mature how we think about security in a developer-first environment, balancing pragmatism with strong technical judgment. - Distinguish between theoretical risk and material business risk to prioritize security efforts effectively. - Improve security posture through scalable mechanisms like tooling, automation, secure defaults, and developer-friendly guardrails. - Support security incident response by helping triage, investigate, and coordinate remediation for product and platform security issues. - Participate in security on-call rotations, helping respond to urgent security events with clear judgment and calm execution. - Help manage and mature our bug bounty and vulnerability disclosure processes, including triage, validation, prioritization, and coordination with engineering teams. YOU MIGHT BE A GOOD FIT IF YOU - Have strong experience in product security, application security, or security engineering. - Are comf
Excerpt from the posting Supabase published. Read the full description on their site before applying.
Skills this posting mentions
Apply to this role, tailored
Queue Product Security Engineer at Supabase and I will read the posting, rewrite your resume against it, draft the cover letter, and score the fit before you send anything.
Applications finish as drafts. Nothing is sent until you read it and press send. New accounts start with 500 free credits.
More roles at Supabase
See all- Yesterday
- 4 days ago
- 4 days ago
- 5 days ago
- Last week
- Last week
Similar roles elsewhere
See more- Today
Listed from the job board Supabase publishes. Refolk is not the employer and does not handle their hiring. Applications go to Supabase directly.