Description:

Skylight is a technology startup focused on creating family-oriented products, including the Skylight Calendar.
The Senior or Staff Product Security Engineer will manage the product security program across cloud backend, mobile apps, and Android platform.

Requirements:

6+ years in application or product security with a software engineering background.
Deep experience in securing backend services and APIs, including OAuth 2.0/OIDC, PKCE, MFA, and session management.
Experience with security tooling and automation, and familiarity with LLM-based systems.
Hands-on experience with bug bounty programs and influencing engineering teams to prioritize security issues.
Strong written communication skills to explain risks to technical and non-technical stakeholders.
Nice to have: Mobile application security experience, Android security experience, familiarity with children's privacy requirements, and incident response experience.

Competitive salary range of $200K-250K plus equity package.
401K matching and wellness, learning, and home-office budgets.
Health, dental, and vision medical plans.
Unlimited PTO and company holidays on the first Friday of every month (except Nov, Dec, Jan).
Tremendous autonomy in setting work direction.

Skills