Product Security Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Design, implement, and sustain bespoke security scanners utilizing frontier models to identify vulnerabilities across Coinbase’s product landscape.

• Spearhead red teaming initiatives focused on internal AI systems, which includes jailbreak testing, prompt injection evaluation, and tool abuse simulation.

• Create AI-driven automation solutions for vulnerability triage, validation, and remediation processes.

• Collaborate with engineering teams to prioritize, address, and confirm resolutions for critical vulnerabilities.

• Provide mentorship to junior security engineers on the integration of AI within offensive security practices.

⛳️ Requirements

• Over 3 years of experience in application security, penetration testing, or offensive security.

• Proven capability to develop customized security tools.

• Practical experience with LLMs or frontier models to automate security processes, enhance vulnerability research, or create security scanners.

• Expertise in red teaming AI-driven systems, covering areas like prompt injection, jailbreak testing, and tool misuse.

• Comprehensive knowledge of OWASP Top 10 and SANS Top 25 vulnerability categories.

• Established history of identifying and exploiting vulnerabilities in production settings.

• Skilled in at least one programming language, such as Python or Go.

• Experience in crafting production-quality security tools.

• Ethical application of generative AI with appropriate human supervision.

🏝️ Benefits

• Eligibility for equity.

• Eligibility for bonuses.

• Medical insurance coverage.

• Dental insurance coverage.

• Vision insurance coverage.

• Quarterly in-person working sessions (“surges”).

• Reasonable accommodations for individuals with disabilities.