Senior or Staff Product Security Engineer

Description: Skylight is a technology startup focused on creating family-oriented products, including the Skylight Calendar. The Senior or Staff Product Security Engineer will manage the product security program across cloud backend, mobile apps, and Android platform. Requirements: 6+ years in application or product security with a software engineering background. Deep experience in securing backend services and APIs, including OAuth 2.0/OIDC, PKCE, MFA, and session management. Experience with security tooling and automation, and familiarity with LLM-based systems. Hands-on experience with bug bounty programs and influencing engineering teams to prioritize security issues. Strong written communication skills to explain risks to technical and non-technical stakeholders. Nice to have: Mobile application security experience, Android security experience, familiarity with children's privacy requirements, and incident response experience. Benefits: Competitive salary range of $200K-250K plus equity package. 401K matching and wellness, learning, and home-office budgets. Health, dental, and vision medical plans. Unlimited PTO and company holidays on the first Friday of every month (except Nov, Dec, Jan). Tremendous autonomy in setting work direction.