资深产品安全工程师
Staff Product Security Engineer
Reddit 是一个由社区组成的社区。它建立在共同的兴趣、热情和信任之上,是互联网上最开放和真实的对话场所。每天,Reddit 用户提交、投票并评论他们最关心的话题。拥有 100,000+ 个活跃社区,以及约 9700 万每日活跃独立访客,Reddit 是互联网上最大的信息来源之一。更多信息,请访问 redditinc.com。
关于职位
Reddit 是一个由社区组成的社区。它建立在共同的兴趣、热情和信任之上,是互联网上最开放和真实的对话场所。每天,Reddit 用户提交、投票并评论他们最关心的话题。拥有 100,000+ 个活跃社区,以及约 9700 万每日活跃独立访客,Reddit 是互联网上最大的信息来源之一。更多信息,请访问 redditinc.com。
Reddit 正在招聘一名资深产品安全工程师,使安全路径成为工程师和 AI 代理最容易选择的路径。你将负责设计和交付安全框架、预设路径和工作流原生控制措施,从而在漏洞进入生产环境之前消除常见的漏洞类型。随着 AI 辅助开发加快代码速度,超过了人工审查的处理能力,这个职位的存在是为了通过护栏、自动化和可扩展的平台级预防措施来弥补这一差距。
你将负责的工作
- 构建和演进安全框架、护栏和库级控制措施,使常见漏洞类型更难被引入。
- 为 AI 辅助开发设计安全控制措施——包括可重用规则包和技能,塑造工程师和编码代理生成、审查和发布代码的方式。
- 将安全嵌入工程师已有的工作流程中。
- 主导新发布和重大架构变更的产品安全评审。
- 识别并消除系统性的安全债务。
- 制定策略,影响架构,并推动跨团队的执行。
我们寻找的人选
- 在软件工程、产品安全或应用安全领域有 8 年以上经验,至少 2 年在具有广泛影响范围的高级职位上工作过。
- 精通一种或多种语言(Go、Python、JS/TS)。
- 有设计、构建和运营生产级系统和开发者友好平台的经验。
- 有构建安全框架、库或护栏以提升安全性的经验。
查看英文原文
Reddit is a community of communities. It’s built on shared interests, passion, and trust, and is home to the most open and authentic conversations on the internet. Every day, Reddit users submit, vote, and comment on the topics they care most about. With 100,000+ active communities and approximately 130 million daily active unique visitors, Reddit is one of the internet’s largest sources of information. For more information, visit www.redditinc.com.
About the Role
Reddit is a community of communities. It’s built on shared interests, passion, and trust and is home to the most open and authentic conversations on the internet. Every day, Reddit users submit, vote, and comment on the topics they care most about. With 100,000+ active communities and approximately 97M+ daily active unique visitors, Reddit is one of the internet’s largest sources of information. For more information, visit redditinc.com.
Reddit is hiring a Staff Product Security Engineer to make the secure path the easiest path for engineers and AI agents. You'll lead the design and delivery of secure frameworks, paved paths, and workflow-native controls that eliminate recurring vulnerability classes before they reach production. As AI-assisted development accelerates code velocity faster than manual review can absorb, this role exists to close that gap structurally — through guardrails, automation, and platform-level prevention that scale with the engineering org.
What You'll Do
- Build and evolve secure frameworks, guardrails, and library-level controls that make common vulnerability classes harder to introduce.
- Design security controls for AI-assisted development — including reusable rule packs and skills that shape how engineers and coding agents generate, review, and ship code.
- Embed security into the workflows engineers already use.
- Drive product security reviews for new launches and major architectural changes.
- Identify and eliminate systemic security debt.
- Shape strategy, influence architecture, and drive execution across teams.
What We're Looking For
- 8+ years of experience in software engineering, product security, or application security, with at least 2 years operating at a staff level of scope and impact.
- Proficiency in one or more languages (Go, Python, JS/TS).
- Experience designing, building, and operating production-quality systems and developer-facing platforms.
- Experience building secure frameworks, libraries, or guardrails that improve security across many teams at once.
- Demonstrated ability to integrate security into developer workflows: CI/CD, code review, release processes, and internal platforms.
- Clear communicator who can explain technical detail and business impact to both engineers and leadership.
- Comfortable in fast-moving environments where AI-assisted development is reshaping how software is built and reviewed.
- Experience with vulnerability discovery and remediation pipelines, including bug bounty or researcher-reported findings.
- Track record of mentoring engineers and raising the technical bar across a security or platform engineering org.
Preferred Qualifications
- Experience securing AI/LLM systems, agentic workflows, or AI-assisted development tooling.
- Familiarity with authentication/authorization systems, cloud-native platforms, and how to secure them.
#LI-Remote
Pay Transparency:
This job posting may span more than one career level.
In addition to base salary, this job is eligible to receive equity in the form of restricted stock units, and depending on the position offered, it may also be eligible to receive a commission. Additionally, Reddit offers a wide range of benefits to U.S.-based employees, including medical, dental, and vision insurance, 401(k) program with employer match, generous time off for vacation, and parental leave. To learn more, please visit https://www.redditinc.com/careers/.
To provide greater transparency to candidates, we share base salary ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar stage growth companies. Final offer amounts are determined by multiple factors including, skills, depth of work experience and relevant licenses/credentials, and may vary from the amounts listed below.
The base salary range for this position is:
$217,000—$303,900 USD
In select roles and locations, the interviews will be recorded, transcribed and summarized by artificial intelligence (AI). You will have the opportunity to opt out of recording, transcription and summarization prior to any scheduled interviews.
During the interview, we will collect the following categories of personal information: Identifiers, Professional and Employment-Related Information, Sensory Information (audio/video recording), and any other categories of personal information you choose to share with us. We will use this information to evaluate your application for employment or an independent contractor role, as applicable. We will not sell your personal information or disclose it to any third party for their marketing purposes. We will delete any recording of your interview promptly after making a hiring decision. For more information about how we will handle your personal information, including our retention of it, please refer to our Candidate Privacy Policy for Potential Employees and Contractors.
Reddit is proud to be an equal opportunity employer, and is committed to building a workforce representative of the diverse communities we serve. Reddit is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If, due to a disability, you need an accommodation during the interview process, please let your recruiter know.