Staff Software Engineer, Product Security

About the role

Backed by leading Silicon Valley investors, Peregrine helps public safety organizations, state and local and governments, federal agencies, and private-sector institutions address society's challenges with unprecedented speed and accuracy.

Our AI-enabled platform turns siloed and disconnected data into operational intelligence - instantly surfacing mission-critical information to empower better, faster decisions that improve outcomes at every touchpoint. Today Peregrine supports hundreds of customers across 30+ states and two countries, serving more than 125 million people - and we're amplifying our impact as we expand into the enterprise and internationally.

Role

We are looking for a Staff Product Security Engineer to help define how security is built into Peregrine's platform and engineering practices. Peregrine stores and processes highly sensitive customer data, making security fundamental to every stage of our product lifecycle.

In this role, you will own critical parts of our product-security strategy and architecture while driving high-leverage initiatives across the engineering organization. You will balance hands-on technical work-including writing and reviewing security-critical code-with cross-functional leadership, risk-based prioritization, and mentorship.

You will have broad ownership across our stack and help establish secure-by-default foundations that make it easier for engineers to build safe, resilient products. This is an opportunity to shape a growing product-security program and make architectural decisions with long-term impact.

Our stack is constantly evolving but is anchored by a backend foundation of Python, Django, Celery, Airflow, and Kafka; a frontend built in React, Redux, and Mapbox; data stores including PostgreSQL and Elasticsearch; machine learning models hosted in Bedrock and SageMaker; and an underlying infrastructure powered by AWS, Pulumi, and Kubernetes.

What You'll Do

• Define and own the product-security roadmap, prioritizing initiatives based on risk, customer impact, business needs, and engineering maturity.
• Define security architecture across the platform, with particular focus on agent sandboxing, software supply chain security, secret management and cloud security.
• Partner with Product Engineering, Infrastructure, Platform, and other teams to incorporate secure-design principles throughout the development lifecycle.
• Write and review security-critical production code across key parts of the product.
• Build secure-by-default libraries, frameworks, and tools that make the secure path the easiest path for developers.
• Identify emerging vulnerabilities and security risks, then develop pragmatic mitigation strategies that support product objectives.

What We Look For

• 8+ years of experience in product security, application security, platform security, security-focused software engineering, or related work.
• Experience designing secure architectures and establishing security standards across an engineering organization.
• A strong software-development background, with experience writing high-quality production Python code
• A track record of identifying and remediating meaningful software vulnerabilities through professional work, security research, penetration testing, bug bounties, CVEs, or comparable experience.
• Excellent communication skills, including the ability to translate technical security risks into clear product and business tradeoffs.
• Ability to work on-site at our San Francisco or New York office.

Nice to Have

• Experience building or scaling product-security programs at a rapidly growing company.
• Experience with AWS and cloud-native security patterns.
• Experience with AI/ML systems and emerging security considerations for LLM-based applications.

Pay and benefits

Annual Salary + Benefits + Equity (if applicable) + Bonus (if applicable) $200,000—$275,000 USD

Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, certifications or licenses, and specific work location. Information on the benefits offered is here.