---
title: 'Product Security Engineer at WorkOS'
canonical: 'https://feeny.ai/job/product-security-engineer-workos-united-states-4dy0ztkyykxe'
type: 'job'
last_seen: '2026-10-17'
---

# Product Security Engineer at WorkOS

- **Company:** WorkOS
- **Location:** United States &, Canada
- **Compensation:** $175k–$275k
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-23
- **Last confirmed live:** 2026-10-17
- **Apply:** https://jobs.ashbyhq.com/workos/31b8c9a3-149c-491f-8bec-cbb5f18d575b

## Job description

## About WorkOS 🚀

WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations.

We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid.

As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products.

## About the Security team

The Security team at WorkOS is responsible for keeping the data and identities of hundreds of millions of users secure. Security is fundamental to our products, and customer trust is the foundation of our success. We are a highly collaborative group with a strong engineering mindset. Our security program is shaped by hands-on experience attacking and defending systems, and applying lessons from across the industry. We embrace the latest advancements in practices and tooling that make modern security teams effective. We are comfortable in code and collaborate often with engineering to create products that are secure by default.

Who we’re looking for

- Risk-focused and pragmatic. You excel at identifying and reasoning about security risk in real-world contexts. You prioritize ruthlessly, always asking: what's the most effective way to reduce risk right now and in the long term?
- A builder who can break things. You're comfortable reading and writing code, and you have a passion for deeply understanding the products you secure. You think like an attacker to find subtle, high impact vulnerabilities and like a defender to design pragmatic, effective mitigations.
- A strong partner to engineering. You build trust with engineers by understanding their priorities, making security frictionless, and finding ways to make the secure path, the easiest path.
- Excited about AI. You're embracing AI and automation to scale security and reduce toil.
- Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you.

## Responsibilities

- Lead secure design efforts. Partner with engineering teams on secure design and code reviews. Identify and prioritize risks early in the product lifecycle.
- Build secure by default systems. Develop paved paths that systemically reduce risk and make secure development the easiest path for engineers.
- Perform offensive security testing. Conduct penetration tests and code audits on new and existing products from an adversarial lens.
- Improve our security tooling. Integrate and improve our static analysis, supply chain security, and vulnerability management capabilities across engineering pipelines.
- Operate our responsible disclosure program. Run and improve our program by furthering automation, validating submissions, and coordinating remediation.
- Improve our products. Write and ship code to remediate vulnerabilities in production systems and improve the security posture of WorkOS products.
- Work directly with customers. Help build our customers' trust by directly engaging with their security-related questions and concerns.

## Qualifications

- 5+ years of experience in a security engineering or security-focused software engineering role.
- Ability to execute across a wide range of security functions such as security assessments, penetration testing, responsible disclosure, security tooling integration, etc.
- Familiarity with and experience using common industry tooling.
- Proven ability to identify vulnerabilities in software, demonstrated through CVEs, bug bounty, blog posts, or prior work experience.
- Strong written and verbal communication skills, particularly in partnering with engineering teams.
- Comfortable reading and writing code, and able to effectively leverage AI during the process.
- Bonus: Experience in the authentication and identity domain.
- Bonus: Experience writing production level code, especially developing security features.

## Benefits and Perks (US Only) 💖

At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.

- 401k matching
- Competitive Equity
- Healthcare, dental and vision coverage
- FSA, ST/LT Disability, Voluntary Life
- Carrot fertility benefits
- 20 days paid vacation + 10 holidays + unlimited sick leave
- 12 weeks fully paid parental leave
- Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active
- Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being
- Commuter benefits for hybrid employees in SF/NYC
- Unlimited token usage!

Please inquire directly with our recruiting team for benefits available to those working outside the US.

## Equal Opportunity Employer

WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

## About WorkOS

## Company Overview
- **One-liner**: WorkOS is a modern API platform that enables developers to quickly add complex enterprise features (SSO, Directory Sync, User Management) to any SaaS application, accelerating the journey to becoming enterprise-ready.
- **Entity Type**: Private (Series C; total funding $210M)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2019
- **Founders**: Michael Grinich

## Core Business
- **Primary industry**: Enterprise SaaS Infrastructure / Developer Tools
- **Target customers**: B2B SaaS companies, from startups to scale-ups, needing to unlock enterprise deals by supporting IT admin requirements (SAML, SCIM, etc.)
- **Mission / purpose**: "Accelerate SaaS companies in their journey to become Enterprise Ready" [workos.com/about](https://workos.com/about)

## Products & Services
- **WorkOS Platform**: A unified API that bundles multiple enterprise features into a single integration. Key capabilities include:
  - **Enterprise SSO (Single Sign-On)**: Support for any SAML or OIDC identity provider (Okta, Entra ID, ADFS, etc.) with a single integration [workos.com](https://workos.com/).
  - **Directory Sync (SCIM)**: Sync user lifecycle events from enterprise directories (Okta, Azure AD, BambooHR, Rippling) via SCIM and HRIS integrations.
  - **User Management**: Complete auth system including Magic Auth (passwordless email codes), Multi-Factor Authentication (MFA), social logins, and organization/role management.
  - **Admin Portal**: A hosted, customizable interface for IT admins to self-configure SSO and directory sync, reducing support burden.
  - **AuthKit**: Flexible, branded authentication UI powered by WorkOS and Radix.
  - **Feature Flags** (via recent product expansion): A new product area, as seen in job postings for "Product Engineer - Feature Flags" [workos.com/careers](https://workos.com/careers).

## Market Standing
- **Valuation**: Not publicly disclosed
- **Key Metric**: Total funding of $210M (across 6 rounds) as of the $100M Series C in March 2026 [linkedin.com](https://www.linkedin.com/company/workos-inc)
- **Notable Investors / Partners**: Greenoaks (led Series B), Meritech Capital Partners and Sapphire Ventures (co-led Series C)
- **Growth Signals**:
  - Headcount grew 46.6% YoY to ~102 employees (July 2025 vs July 2026) [linkedin.com](https://www.linkedin.com/company/workos-inc)
  - Operations in 9 countries (US, Canada, UK, Serbia, Spain, Portugal, etc.)
  - Acquired Modulz (design system) in June 2022
  - Active job postings up 200% year-over-year (33 open positions) [linkedin.com](https://www.linkedin.com/company/workos-inc)
  - LinkedIn followers grew 93.6% year-over-year (to ~15,400)

## Competitive Advantages
- **Unified API approach**: One integration for SSO, SCIM, user management, and admin onboarding, saving months of development vs. building each feature separately.
- **Developer-first design**: Modern RESTful APIs, JSON responses, SDKs for Node.js, Ruby, Python, .NET, Go, etc., and a focus on minimal friction for engineers.
- **Broad provider coverage**: Works with 20+ enterprise identity providers and directories out of the box.
- **Radix design system**: Open-source component library from the Modulz acquisition, used to build AuthKit and Admin Portal with high polish.
- **Proven at scale**: Used by SaaS companies to unlock multi-million dollar deals (e.g., Vercel, Loom, etc. – though not explicitly cited in search results, typical customer base).

## Strategic Focus
- **Expanding product surface**: Adding new modules like Feature Flags, Audit Logs, and RBAC to become the single "enterprise infrastructure" layer for SaaS.
- **Going multi-product**: Enabling the same API to support multiple enterprise features, increasing wallet share per customer.
- **Hiring for AI-native sales and engineering**: Job postings for "Applied AI Engineer" and "GTM - AI Native Sales" signal a push into AI-driven product capabilities and go-to-market.
- **Remote-first scaling**: Building a distributed team (102 people across 9 countries) while maintaining a strong engineering culture.

## Why Work Here
- **Remote-first culture**: Team of 100+ builders distributed across the US, Canada, Europe, and Latin America, with a strong emphasis on developer joy and autonomy [workos.com/about](https://workos.com/about).
- **Generous benefits** (US employees; comparable benefits outside US):
  - Medical, dental, and vision insurance
  - 401(k) with 3% match
  - 20 days paid vacation per year
  - 12 weeks parental leave
  - Monthly fitness and wellness stipends
  - Home office setup stipend [workos.com/careers](https://workos.com/careers)
- **Engineering culture**: High ratio of technical staff (59 out of 102 in technical roles), strong alumni from Stripe, GitHub, Plaid, Netlify, and others [linkedin.com](https://www.linkedin.com/company/workos-inc).
- **Career growth**: Rapidly growing company (46.6% headcount growth YoY) with many open roles in engineering, product, and GTM, offering significant ownership and impact.
- **Employer rating**: 4.0/5.0 on LinkedIn (31 reviews), with strong scores for work-life balance (4.2) and culture (4.0) [linkedin.com](https://www.linkedin.com/company/workos-inc).

## Sources
1. [workos.com](https://workos.com/) - Product overview and features
2. [workos.com/about](https://workos.com/about) - Company mission and team description
3. [workos.com/careers](https://workos.com/careers) - Benefits and open positions
4. [linkedin.com](https://www.linkedin.com/company/workos-inc) - Company details, headcount, funding, and employee data
5. [jobsbyculture.com](https://jobsbyculture.com/companies/workos) - Cultural fit and engineering focus

## Other roles at WorkOS

- [Data Engineer](https://feeny.ai/job/data-engineer-workos-united-states-kbz35e3h6r8f) — United States &, Canada
- [Engineering Manager - Dashboard](https://feeny.ai/job/engineering-manager-dashboard-workos-san-francisco-kjfx056y41x6) — San Francisco, CA
- [Growth Marketing Generalist](https://feeny.ai/job/growth-marketing-generalist-workos-san-francisco-nm7sp9jn8fqq) — San Francisco, CA
- [Software Engineer - Infrastructure Security](https://feeny.ai/job/software-engineer-infrastructure-security-workos-united-states-rrdwrqry38zz) — United States &, Canada
- [Account Manager](https://feeny.ai/job/account-manager-workos-united-states-8recvtp9ney2) — United States &, Canada
- [Employee Programs](https://feeny.ai/job/employee-programs-workos-san-francisco-pqma8pkt2axz) — San Francisco, CA
- [Design Engineer](https://feeny.ai/job/design-engineer-workos-united-states-v8fz5kv70g7e) — United States &, Canada
- [Systems Engineer](https://feeny.ai/job/systems-engineer-workos-united-states-dy3j22y1e219) — United States &, Canada
- [Product Manager - Growth](https://feeny.ai/job/product-manager-growth-workos-united-states-ktcfyt3cdf61) — United States &, Canada
- [Brand Design | Web](https://feeny.ai/job/brand-design-web-workos-united-states-9f97c2vkkpxv) — United States &, Canada