Why This Job is Featured on The SaaS Jobs
Product Security sits at the center of modern SaaS, where multi-tenant architectures, rapid feature delivery, and complex authorization models create risk at the application layer. This role is notable because it focuses on making security scalable through “paved roads” and automated controls, a pattern increasingly used by SaaS platforms that need consistent guardrails across many engineering teams. The mention of AI and LLM-powered offerings also signals a security scope that extends beyond classic web vulnerabilities into newer workflow and data-leakage concerns.
From a SaaS career perspective, the work builds durable leverage: designing secure-by-default frameworks, shaping threat modeling upstream, and translating findings into engineering primitives that teams can reuse. Experience with data isolation, permissioning, and business-logic review tends to transfer well across B2B SaaS products, especially those with extensibility and integrations. Ownership of pen testing, bug bounty intake, and vulnerability remediation also develops a pragmatic, end-to-end view of how SaaS security programs operate in production.
This role fits engineers who prefer partnering closely with product teams rather than operating as a separate audit function. It will suit professionals who like writing and reviewing code, influencing standards, and turning recurring security issues into automation. It also aligns with those who want their security work to evolve alongside AI-enabled product changes.
The section above is editorial commentary from The SaaS Jobs, provided to help SaaS professionals understand the role in a broader industry context.
Job Description
Join Airtable as a Product Security Engineer and play a pivotal role in shaping the security of our rapidly evolving platform as we expand our AI and LLM-powered offerings. You will join the team responsible for safeguarding the application layer of Airtable’s platform.
You will partner closely with product engineering teams to build paved roads, frameworks, and automated controls that make the secure path the easy path for our engineering teams. You will help influence application security at scale, ensuring our products are secure by design.
What you'll do
- Develop self-service security frameworks and "paved roads" that allow engineering teams to ship secure code by default.
- Focus on automated guardrails for common vulnerabilities, while prioritizing deep-dive design reviews into complex business logic and data isolation issues (for example, multi-tenant isolation and authorization/permission bypasses) that automated tools cannot catch.
- Partner with product and engineering teams to review designs early, contribute to threat modeling for new features and complex initiatives, and provide clear, actionable security guidance.
- Research emerging threats and evolving best practices, specifically regarding AI and LLM safety, and implement controls to secure these workflows.
- Manage and evolve our approach to external penetration testing and bug bounties, driving remediation for findings and treating vulnerability management as an engineering problem.
- Contribute to the long-term roadmaps, metrics, and strategic planning for the security team.
- (Senior/Staff L5+) Lead complex threat modeling sessions for major product launches and define secure coding standards, and actively mentor other engineers to raise the technical security bar across the organization.
Who you are
- 4+ years of experience in product security or application security, with experience shipping production code. Please note this is not an early career position.
- You have a strong background in computer science or a related field, with proficiency in writing clean, maintainable code.
- You have deep familiarity with JavaScript or TypeScript, Node.js, and modern web application frameworks, and can reason about the security implications of systems built on them.
- You have hands-on experience securing LLM integrations and identifying prompt injection or data leakage risks.
- You are proficient in writing and reviewing code and treat security as an engineering problem to be solved with software, not just policies.
- You excel at communicating complex security risks to non-security stakeholders and enjoy collaborating cross-functionally to find solutions that balance security with engineering velocity.
- You are comfortable working in a fast-paced environment, navigating ambiguity, continuously learning about emerging threats and technologies, and contributing to long-term security strategy.
Airtable is an equal opportunity employer. We embrace diversity and strive to create a workplace where everyone has an equal opportunity to thrive. We welcome people of different backgrounds, experiences, abilities, and perspectives. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or any characteristic protected by applicable federal and state laws, regulations and ordinances. Learn more about your EEO rights as an applicant.
VEVRAA-Federal Contractor
If you have a medical condition, disability, or religious belief/practice which inhibits your ability to participate in any part of the application or interview process, please complete our Accommodations Request Formand let us know how we may assist you. Airtable is committed to participating in the interactive process and providing reasonable accommodations to qualified applicants.
