About the company
Skylight is a technology startup building the OS of the family, making Skylight Calendar. Bootstrapped and profitable with $300M+ in annual revenue.
Responsibilities
- Own the vulnerability management pipeline end to end: intake, triage, prioritization, and driving fixes to closure across Backend, Mobile, and Android teams
- Write and ship security fixes directly in codebases
- Own and evolve the AI security scanning and verification pipeline, tune it to reduce false positives, extend coverage, and integrate into CI
- Run the HackerOne bug bounty program: triage reports, validate findings, work with researchers, decide on payouts, manage vendor relationship
- Manage third-party penetration testing engagements
- Lead security design reviews and threat modeling for new features, including AI/LLM-powered features
- Review and advise on device and firmware security work
- Provide metrics and data on findings, remediation, and SLA adherence
- Serve as subject matter expert during product security incidents
Requirements
- 6+ years in application or product security with a software engineering background
- Deep experience securing backend services and APIs, including OAuth 2.0/OIDC, PKCE, MFA, session management, and token handling
- Experience building and maintaining security tooling and automation (static analysis, CI integrations, custom scanners), comfort with LLM-based systems
- Hands-on experience running or triaging a bug bounty program
- Track record of getting engineering teams to prioritize and fix security issues
- Clear written communication skills
- Nice to have: mobile application security (OWASP MASVS), Android platform security, AI/LLM risk assessment, children's privacy requirements (COPPA), embedded/IoT/firmware security, EU Cyber Resilience Act, UK PSTI, incident response
Conditions
- Competitive salary + equity package
- 401K matching
- Wellness, learning, and home-office budgets
- Health, Dental & Vision Medical Plans
- Unlimited PTO
- Company holidays on the first Friday of every month