Staff Software Engineer, Product Security

As an engineering team, we believe strongly that empathy improves our solutions. Seeing how people use the product is a priority and the way we get to the right answer. Engineers will have the opportunity to work closely with our team onsite to understand the variety of use cases that Peregrine serves.

Our teams tackle a range of challenges, from enabling real-time user collaboration on detailed maps to building high-scale backend architecture for ingesting billions of data points.

We believe that humility and empathy are essential for building the right solutions—you will collaborate directly with our deployment team and users as we iterate to solve their problems. Perseverance and creativity are crucial to executing our vision.

We are looking for a Staff Product Security Engineer to help define how security is built into Peregrine’s platform and engineering practices. Peregrine stores and processes highly sensitive customer data, making security fundamental to every stage of our product lifecycle.

In this role, you will own critical parts of our product-security strategy and architecture while driving high-leverage initiatives across the engineering organization. You will balance hands-on technical work—including writing and reviewing security-critical code—with cross-functional leadership, risk-based prioritization, and mentorship.

You will have broad ownership across our stack and help establish secure-by-default foundations that make it easier for engineers to build safe, resilient products. This is an opportunity to shape a growing product-security program and make architectural decisions with long-term impact.

Our stack is constantly evolving but is anchored by a backend foundation of Python, Django, Celery, Airflow, and Kafka; a frontend built in React, Redux, and Mapbox; data stores including PostgreSQL and Elasticsearch; machine learning models hosted in Bedrock and SageMaker; and an underlying infrastructure powered by AWS, Pulumi, and Kubernetes.

• Define and own the product-security roadmap, prioritizing initiatives based on risk, customer impact, business needs, and engineering maturity.
• Define security architecture across the platform, with particular focus on agent sandboxing, software supply chain security, secret management and cloud security.
• Partner with Product Engineering, Infrastructure, Platform, and other teams to incorporate secure-design principles throughout the development lifecycle.
• Write and review security-critical production code across key parts of the product.
• Build secure-by-default libraries, frameworks, and tools that make the secure path the easiest path for developers.
• Identify emerging vulnerabilities and security risks, then develop pragmatic mitigation strategies that support product objectives.

• 8+ years of experience in product security, application security, platform security, security-focused software engineering, or related work.
• Experience designing secure architectures and establishing security standards across an engineering organization.
• A strong software-development background, with experience writing high-quality production Python code
• A track record of identifying and remediating meaningful software vulnerabilities through professional work, security research, penetration testing, bug bounties, CVEs, or comparable experience.
• Excellent communication skills, including the ability to translate technical security risks into clear product and business tradeoffs.
• Ability to work on-site at our San Francisco or New York office.

• Experience building or scaling product-security programs at a rapidly growing company.
• Experience with AWS and cloud-native security patterns.
• Experience with AI/ML systems and emerging security considerations for LLM-based applications.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.