About this role.
This staff-level product security role builds secure frameworks, guardrails, and workflow-native controls that prevent recurring vulnerabilities across Reddit’s engineering organization. The engineer will secure AI-assisted development practices, integrate controls into CI/CD and code-review workflows, and lead security reviews for launches and architectural changes. Success requires deep software and application-security expertise, strong cross-functional influence, and the ability to translate security risk into practical engineering decisions. The role also includes reducing systemic security debt, improving vulnerability-remediation pipelines, and mentoring engineers.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Job Complexity
5/5Pace & Pressure
5/5Autonomy Level
5/5Communication Load
5/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would start by combining threat modeling, vulnerability trends, incident learnings, asset criticality, and developer-friction data. I would prioritize controls that remove high-impact vulnerability classes across many teams, then define measurable outcomes such as reduced findings, remediation time, and secure-path adoption.
I would map the workflow from prompt creation through code generation, review, CI, deployment, and monitoring. Controls would include approved rule packs, secure coding guidance embedded in developer tools, policy checks in CI, secrets and dependency scanning, human review for high-risk changes, and telemetry to measure control effectiveness.
I design controls to be workflow-native, fast, and actionable, with safe defaults and clear remediation guidance. I validate them with representative engineering teams, track false positives and bypasses, and invest in paved paths so the secure option is easier than the insecure alternative.
I establish the system boundaries, data flows, trust relationships, threat model, and security requirements early in the design process. I focus on practical risks such as authorization boundaries, authentication, secrets handling, cloud configuration, abuse cases, and operational detection, then document owners and timelines for mitigations.
I would address the individual report promptly, then investigate the systemic root cause across the codebase and development lifecycle. I would create preventative framework or library improvements, add targeted detection and tests, coordinate remediation with owners, and use recurrence metrics to confirm the vulnerability class is being eliminated.
Reddit is a community of communities. It’s built on shared interests, passion, and trust, and is home to the most open and authentic conversations on the internet. Every day, Reddit users submit, vote, and comment on the topics they care most about. With 100,000+ active communities and approximately 130 million daily active unique visitors, Reddit is one of the internet’s largest sources of information. For more information, visit www.redditinc.com.
About the Role
Reddit is a community of communities. It’s built on shared interests, passion, and trust and is home to the most open and authentic conversations on the internet. Every day, Reddit users submit, vote, and comment on the topics they care most about. With 100,000+ active communities and approximately 97M+ daily active unique visitors, Reddit is one of the internet’s largest sources of information. For more information, visit redditinc.com.
Reddit is hiring a Staff Product Security Engineer to make the secure path the easiest path for engineers and AI agents. You’ll lead the design and delivery of secure frameworks, paved paths, and workflow-native controls that eliminate recurring vulnerability classes before they reach production. As AI-assisted development accelerates code velocity faster than manual review can absorb, this role exists to close that gap structurally — through guardrails, automation, and platform-level prevention that scale with the engineering org.
What You’ll Do
- Build and evolve secure frameworks, guardrails, and library-level controls that make common vulnerability classes harder to introduce.
- Design security controls for AI-assisted development — including reusable rule packs and skills that shape how engineers and coding agents generate, review, and ship code.
- Embed security into the workflows engineers already use.
- Drive product security reviews for new launches and major architectural changes.
- Identify and eliminate systemic security debt.
- Shape strategy, influence architecture, and drive execution across teams.
What We’re Looking For
- 8+ years of experience in software engineering, product security, or application security, with at least 2 years operating at a staff level of scope and impact.
- Proficiency in one or more languages (Go, Python, JS/TS).
- Experience designing, building, and operating production-quality systems and developer-facing platforms.
- Experience building secure frameworks, libraries, or guardrails that improve security across many teams at once.
- Demonstrated ability to integrate security into developer workflows: CI/CD, code review, release processes, and internal platforms.
- Clear communicator who can explain technical detail and business impact to both engineers and leadership.
- Comfortable in fast-moving environments where AI-assisted development is reshaping how software is built and reviewed.
- Experience with vulnerability discovery and remediation pipelines, including bug bounty or researcher-reported findings.
- Track record of mentoring engineers and raising the technical bar across a security or platform engineering org.
Preferred Qualifications
- Experience securing AI/LLM systems, agentic workflows, or AI-assisted development tooling.
- Familiarity with authentication/authorization systems, cloud-native platforms, and how to secure them.
#LI-Remote
Pay Transparency:
This job posting may span more than one career level.
In addition to base salary, this job is eligible to receive equity in the form of restricted stock units, and depending on the position offered, it may also be eligible to receive a commission. Additionally, Reddit offers a wide range of benefits to U.S.-based employees, including medical, dental, and vision insurance, 401(k) program with employer match, generous time off for vacation, and parental leave. To learn more, please visit https://www.redditinc.com/careers/.
To provide greater transparency to candidates, we share base salary ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar stage growth companies. Final offer amounts are determined by multiple factors including, skills, depth of work experience and relevant licenses/credentials, and may vary from the amounts listed below.
The base salary range for this position is:
$217,000—$303,900 USD
In select roles and locations, the interviews will be recorded, transcribed and summarized by artificial intelligence (AI). You will have the opportunity to opt out of recording, transcription and summarization prior to any scheduled interviews.
During the interview, we will collect the following categories of personal information: Identifiers, Professional and Employment-Related Information, Sensory Information (audio/video recording), and any other categories of personal information you choose to share with us. We will use this information to evaluate your application for employment or an independent contractor role, as applicable. We will not sell your personal information or disclose it to any third party for their marketing purposes. We will delete any recording of your interview promptly after making a hiring decision. For more information about how we will handle your personal information, including our retention of it, please refer to our Candidate Privacy Policy for Potential Employees and Contractors.
Reddit is proud to be an equal opportunity employer, and is committed to building a workforce representative of the diverse communities we serve. Reddit is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If, due to a disability, you need an accommodation during the interview process, please let your recruiter know.
Upload your resume now
- To unlock remote work opportunities and be discovered by global employers.
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
