SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 210,000 - 240,000 / annual
Typeface is a Series B AI company backed by Microsoft, GV, Salesforce Ventures, Lightspeed, Madrona, and Menlo that helps enterprise brands move from brief to fully personalized campaigns in days instead of months. The company is building agentic AI technology for marketing orchestration and has raised $165M.
You will lead the security of Typeface's core AI platform, embedding security into every stage of product design, build, and launch. This is a hands-on technical leadership role where you'll shape how a fast-growing AI company builds secure products—not just by finding vulnerabilities, but by creating frameworks, tooling, and secure-by-design practices that help every engineer ship safer code faster.
Key responsibilities include:
- Lead security design reviews and threat modeling for new features and core product experiences from early architecture through production launch
- Identify, triage, and drive remediation of vulnerabilities across web applications, APIs, and services
- Build and scale security tooling in the development lifecycle, including SAST, DAST, dependency scanning, and secrets detection in CI/CD
- Assess and secure AI and generative AI features against emerging risks such as prompt injection, data leakage, and model misuse
- Perform hands-on code reviews and penetration tests; manage bug bounty and external testing programs
- Collaborate with Product, Engineering, and Compliance to balance security with speed and user experience
- Create secure coding guidelines and training to raise the security bar across engineering
- Mentor and support engineers to shape a security-first engineering culture
The role is hybrid, based in Palo Alto with 3 days per week in-office collaboration.
REQUIREMENTS:
- 10+ years of experience in product security, application security, or software engineering with a strong track record of securing products at scale
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent practical experience)
- Deep knowledge of web application and API security, including OWASP Top 10 and common vulnerability classes
- Proven experience with threat modeling, secure architecture reviews, and hands-on code review
- Strong programming skills in one or more languages: Python, TypeScript/JavaScript, Go, or Java
- Experience integrating security tooling into CI/CD pipelines and cloud-native environments (AWS, Azure, or GCP)
- Excellent communication skills and ability to thrive independently and in collaborative teams
- Experience supporting B2B or enterprise SaaS products
- Bonus: Background securing AI, LLM, or generative AI applications
- Bonus: Industry certifications such as OSCP, OSWE, GWAPT, or CSSLP
