Product Security Engineer

Meet Keystone AI : the creator of the most secure passkeys and leading provider of hardware authentication security keys. Our company’s mission is to make secure login easy and available for everyone. Keystone AI was founded in 2007 by Stina and Jakob Ehrensvard, and is public on Nasdaq Stockholm Main Market: YUBICO. Our customers include Fortune 500 companies, hundreds of government agencies and millions of individuals in over 160 countries that rely on Keystone AI technology to secure access to computers, online services and mobile apps. We are a global company with a strong company culture and employees located in over 14 countries. Keystone AI ’s headquarters are based in Stockholm, Sweden and Santa Clara, CA. Aligned with our mission to make the internet more secure for everyone, Keystone AI donates YubiKeys to organizations helping at-risk individuals through our philanthropic initiative, Secure it Forward . At Keystone AI , we offer: Freedom and Flexibility: At Keystone AI , we want you to be your most productive selves whether you decide to work 100% from home or choose to work hybrid/onsite. The way we balance the fast-paced demands of a high-growth company and sustainability is making rest a priority. Keystone AI Values: We work to ensure that our employees have an open space to have their voices amplified to create a workplace where everyone feels like they belong. Aligned with this, our employees have created some pretty cool Employee Resource Groups: YubiPride, YubiBIPOC, YubiSustainability and YubiWomen. Additionally, Keystone AI donates YubiKeys to organizations in need all over the world (you can read more about our work here). Social Connection: Relationships and connectedness matter, and we love spending time with our team! Our virtual workspace keeps us connected day-to-day whether it's through Keystone AI celebrating wins or our buzzing Slack communities. Check out our Life at Keystone AI Page on LinkedIn and our awards here . The Role: The Product Security team is responsible for ensuring Keystone AI develops and maintains secure products and services. As part of the Product Security team, your primary responsibility will be to collaborate with the firmware and software teams to design and integrate solutions that support secure design and development practices. You will also employ a combination of static and dynamic analysis methodologies to identify and remedy complex vulnerabilities across our products. If you are looking for a fun challenge, are passionate about security, and want to work at a security-oriented company, this opportunity is for you. Tasks & Responsibilities: Define and evangelize requirements and guidance for secure by design and secure by default principles Implement automation to prevent and detect security flaws in all phases of development Conduct design reviews and manual security assessments Lead training and awareness sessions Define and implement metrics to provide visibility into the impact of your work Define, lead, and influence processes to secure products and services Identify and advocate for new and novel uses of Keystone AI ’s technology Ability to travel to Keystone AI ’s other offices two times per year Basic Qualifications: 3+ years in a product security role 3+ years of software development Proficiency in threat modeling Proficiency in C Knowledge of common vulnerability classes Experience in static code analysis Optional Skills and Experience: Knowledge of WebAuthn, OATH HOTP, OATH TOTP, U2F, PIV, or OpenPGP Proficiency in .NET or C++ Experience developing for ARM Experience in targeted fuzzing Our U. S. benefits are designed for your overall well-being: Health coverage. We’ve got you covered with top of the line health plans, including dental and vision. We pay 100% of your premium and 85% for your family. Retirement plan . Our retirement plan includes a 401K dollar per dollar match up to 6% with a cap of $6K/year. Immediate vesting. Wellness reimbursement . We offer $1,200.00 in wellness earnings (prorated based on start date) that you can use on your gym membership, a massage, or your favorite online fitness classes. This is a taxable benefit if you choose to participate. Learning and development . We encourage your professional growth and offer a yearly development stipend of $3,000 and mentorship program. Time off. We offer a total of 15 vacation days plus 10 holidays, and 7 sick days a year. Paid parental leave. We love welcoming new family members to our YubiTeam! All parents receive 8 weeks of paid leave. Birthing parents receive an additional 8 weeks of paid leave (16 weeks total). Commuter Benefits . If you need to commute to the office, we offer commuter benefits. Strong mission & company values. We’re a global team on a global mission to make the internet more secure for everyone. We believe that every person’s work matters. That you should always be nice, stay humble, and have fun, and never take yourself too seriously. We are an equal opportunity employer, we value diversity and uphold an inclusive e