Ładowanie opisu…
Opis oferty
Asana
31000 - 36000 zł
Warszawa, Polska
About you
At Asana, we're committed to building teams that include a variety of backgrounds, perspectives, and skills, as this is critical to helping us achieve our mission. If you're interested in this role and don't meet every listed requirement, we still encourage you to apply.
At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. Our security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations.
We're looking for a Product Security Engineer to join our Product Security team in Warsaw. You'll be a foundational member of the security presence in a key engineering hub, partnering directly with product and infrastructure teams to ensure we design and ship secure software. You will be instrumental in scaling our security practices by building secure-by-default frameworks, eliminating entire classes of vulnerabilities, and championing a security-first mindset across our web, mobile, and AI-powered product surfaces.
This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements.
We offer a Contract of Employment (UoP) for our employees in Poland.
For this role, the estimated base salary range is between 31 000 - 36 000 PLN gross per month (subject to all taxes and necessary deductions). The actual base salary will vary based on various factors, including market and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base salary range for this role may be modified.
In addition to base salary, your compensation package may include additional components such as equity and sales incentive pay (for most sales roles), and benefits. If you're interviewing for this role, speak with your recruiter to learn more about the total compensation and benefits for this role.
#LI-Hybrid
,[Partner with product and engineering teams across the full software development lifecycle to ensure security is designed and built into Asana's products and platform., Conduct security architecture reviews, threat modeling, and code reviews for new features and services., Develop, implement, and maintain secure-by-default frameworks and libraries that empower engineering teams to build secure systems easily., Build and maintain automated security tooling (static and dynamic analysis rules, custom SAST/DAST checks, and automated red-teaming) to scale security coverage without scaling headcount., Identify and address AI-specific security risks such as prompt injection, insecure tool permissions, and abuse-resistant design in Asana's AI and agentic features., Triage, investigate, and drive remediation of vulnerabilities from our bug bounty program, internal testing, and automated security tooling., Influence engineering initiatives by conducting design and roadmap reviews, effectively communicating security constraints, and assisting teams in making informed trade-offs., Investigate product security incidents as a subject matter expert, using logs and monitoring tools to contain, analyze, and drive resolution., Evaluate and improve software supply chain security, including dependency management, SCA tooling, and third-party risk in the development pipeline., Develop and deliver training to educate engineers on secure coding best practices and emerging threats., Stay informed of industry trends, emerging threats, and best practices to ensure that Asana's security posture remains robust., Collaborate with teammates and stakeholders to develop both short-term and long-term strategies for risk management.] Requirements: Security, Python, JavaScript, TypeScript, Scala, OWASP, SQL, AI, ML, SAST, DAST, Asana, XSS, CSRF, SSRF, SCA Additionally: Private healthcare, Mental health care, Sport subscription, Training budget, Coaching, Long-term savings or retirement plans, Free coffee, Canteen, Modern office, No dress code, In-house trainings, In-office culinary options, Free lunch, Free snacks, Shower, Bike parking, Free beverages, Free breakfast, Startup atmosphere, In-house hack days.