SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 210,000 - 240,000 / annual
Typeface is an AI-powered enterprise marketing platform that helps brands move from brief to fully personalized campaigns in days instead of months. Founded by Abhay Parasnis and backed by Microsoft, GV, Salesforce, Lightspeed, Madrona, and Menlo, the company is building category-defining technology at the intersection of creativity and AI.
You will lead security across Typeface's core AI platform, embedding security into every stage of design, build, and ship. This is a hands-on Staff role where you'll shape how a fast-growing AI company builds secure products—not just by finding vulnerabilities, but by creating frameworks, tooling, and secure-by-design practices that enable every engineer to ship safer code faster.
Key responsibilities include:
- Lead security design reviews and threat modeling for new features and core product experiences from early architecture through production launch
- Identify, triage, and drive remediation of vulnerabilities across web applications, APIs, and services
- Build and scale security tooling in the development lifecycle, including SAST, DAST, dependency scanning, and secrets detection in CI/CD
- Assess and secure AI and generative AI features against emerging risks such as prompt injection, data leakage, and model misuse
- Perform hands-on code reviews and penetration tests; manage bug bounty and external testing programs
- Collaborate with Product, Engineering, and Compliance to balance security with speed and user experience
- Create secure coding guidelines and training to raise the security bar across engineering
- Mentor engineers and help shape a security-first engineering culture
The role is hybrid, based in Palo Alto with 3 days per week in-office collaboration.
Requirements:
- 10+ years of experience in product security, application security, or software engineering with a strong track record of securing products at scale
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent practical experience)
- Deep knowledge of web application and API security, including OWASP Top 10 and common vulnerability classes
- Proven experience with threat modeling, secure architecture reviews, and hands-on code review
- Strong programming skills in one or more languages: Python, TypeScript/JavaScript, Go, or Java
- Experience integrating security tooling into CI/CD pipelines and cloud-native environments (AWS, Azure, or GCP)
- Excellent communication skills and ability to thrive independently and in collaborative teams
- Experience supporting B2B or enterprise SaaS products
- Bonus: Background securing AI, LLM, or generative AI applications
- Bonus: Industry certifications such as OSCP, OSWE, GWAPT, or CSSLP
