Staff Product Security Engineer

GRAIL

Staff Product Security Engineer leading product security initiatives for GRAIL's life-saving technology. Collaborating with Engineering and Product teams, mentoring other security engineers.

Posted 6/26/2026full-timeMenlo Park • California • 🇺🇸 United StatesLead💰 $169,000 - $224,000 per yearWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead product security architecture and security-by-design practices across the full product lifecycle, from concept through post‑market support.
Embed security into the Secure Software Development Lifecycle (SSDLC) and DevSecOps pipelines, establishing guardrails that balance risk reduction with engineering velocity.
Perform and guide threat modeling, security risk assessments, and architecture reviews across products and enterprise‑connected systems.
Define and enforce security controls for AI- and ML-enabled products, including data protection, model integrity, access controls, and secure pipelines.
Manage and operate Product Security post-market surveillance activities across GRAIL products and services, from intake through remediation and closure.
Influence secure solution architectures for GRAIL ecosystems, considering system integration, access control (IAM), key management (KMS), secure data flows, resilience, patch management, and recovery.
Scope, oversee, and review penetration testing and advanced security testing activities across software, systems, and infrastructure.
Serve as a product security subject matter expert during incident response, root cause analysis, and post‑incident improvements.
Partner with Product, Engineering, Quality, Legal, and other stakeholders to ensure alignment with regulatory and industry cybersecurity requirements.
Define, track, and report product security metrics and KPIs to provide visibility into security posture and risk trends.
Mentor and coach engineers, contributing to the growth of product security capabilities and future technical leaders at GRAIL.

Requirements

What you’ll need

8+ years of experience in product security, cybersecurity, application security, or related technical security roles
Hands-on experience leading threat modeling, security risk assessments, and vulnerability management for complex software products
Experience embedding security into modern software development environments, including CI/CD and DevSecOps practices
Experience supporting security incident response and conducting root cause analysis in production environments
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent practical experience

Benefits

Comp & perks

Flexible work arrangement
Ability to work from GRAIL's office or from home
Minimum 60%, or 24 hours, of total work week on-site
Specific schedule determined in collaboration with your manager

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

product securitycybersecurityapplication securitythreat modelingsecurity risk assessmentsvulnerability managementSecure Software Development Lifecycle (SSDLC)DevSecOpspenetration testingsecurity metrics

Soft Skills

leadershipmentoringcoachingcommunicationcollaborationinfluenceproblem-solvinganalytical thinkingstakeholder engagementincident response