Skylight

Security Engineer

• Own day-to-day execution of the product security program across cloud backend, mobile apps, and Android platform
• Own vulnerability management end to end, including intake, triage, prioritization, and driving fixes to closure against remediation SLAs
• Write and ship security fixes directly in backend, mobile, and Android codebases
• Own and evolve AI security scanning and verification, reducing false positives, extending repository coverage, and integrating it into CI
• Run the HackerOne bug bounty program, including report triage, finding validation, researcher collaboration, payout decisions, and vendor relationship management
• Manage third-party penetration testing engagements from scoping through remediation
• Lead security design reviews and threat modeling for new features and products, including AI/LLM-powered features and products handling children's data
• Review and advise on device and firmware security work
• Provide metrics and data on findings, remediation, and SLA adherence for compliance and leadership reporting
• Serve as a subject matter expert during product security incidents
• Work closely with the Head of Security and serve as hands-on security expertise for engineering teams

Senior Product Security Engineer