Why This Field Matters

A scan of public hiring APIs on July 19, 2026 surfaced a pattern. Out of 105 fresh postings across 17 top scaleups, security engineering roles were open simultaneously at Discord, Gusto, Ramp, Replit, Brex, and Cursor. The specialties vary: application security at Brex, endpoint security at Ramp, vulnerability management and anti-abuse at Replit. Cursor is hiring an Engineering Manager for “Agent & Product Security”, a title that barely existed 18 months ago. These are companies at the stage right before a dedicated CISO org, and they want engineers who design security inside the product codebase rather than audit it from outside.

AI agents drive much of this. Check Point’s AI Security Report 2026, published July 14, measured a roughly fivefold jump in malicious payload detections between March and May 2026, and flagged indirect prompt injection (instructions smuggled into documents and web pages an agent reads) as a working attack technique, not a lab curiosity. Models cannot reliably separate data from instructions. Ship an agent with tools and permissions, and your attack surface now extends past your own code.

Market numbers point the same way. Mordor Intelligence puts the global application security market at $14.8 billion in 2026, heading to $28.1 billion by 2031 at a 13.6% CAGR. At FAANG scale, product security is a mature ladder with dedicated red teams and bug bounty programs. At a Series B scaleup, it is often a single engineer’s job description, and that engineer carries outsized leverage over how the whole product gets built.

One boundary worth drawing: this is not privacy or trust and safety engineering. T&S handles user behavior and content abuse (fake accounts, harmful content, age checks). Product security stops code-level and architecture-level attacks: injection, privilege escalation, data exfiltration paths. Companies post them as separate roles, and the interview loops test different muscles.

Required Skills

A product security engineer is a builder, not an auditor. The job does not end at filing a vulnerability report; it ends when the fix ships and the class of bug cannot recur.

Application security fundamentals

• Not memorizing the OWASP Top 10, but having found and fixed IDOR, SSRF, and auth bypass bugs in a codebase you own
• Authentication and authorization design: OAuth 2.0, OIDC, session management, token lifecycles
• Secrets hygiene: killing hardcoded keys, wiring Vault or KMS, automating rotation

The new AI attack surface

• Prompt injection defense: distinguishing direct from indirect injection, designing input and output validation layers
• Agent permission boundaries: tool-call allowlists, sandboxed execution, least privilege applied to agents
• RAG pipeline poisoning: treating every external document as input from outside the trust boundary

Secure SDLC construction

• Lightweight threat modeling that fits inside a sprint instead of blocking it
• Wiring SAST, DAST, dependency scanning, and secret scanning into CI, then actually managing the false-positive load
• Incident response: audit log design, anomaly alerting, runbooks, and drills

Persuasion

• Translating security requirements into product language so engineering teams move on their own. For the first security hire at a scaleup, this matters as much as the code.

Career Path

Junior (0-3 years) Start as a backend or fullstack engineer and volunteer for the security tickets nobody wants. If your company runs a security champions program, raise your hand; if it does not, create small wins yourself, like cleaning up dependency vulnerabilities or introducing secret scanning. A CTF placement or a few accepted bug bounty reports remain the cheapest proof of practical instinct on a resume.

Mid-level (3-6 years) The “first security hire” seats at scaleups open in this band. From July 2026 postings: Ramp listed senior endpoint security at $172K-$236K, and Replit listed vulnerability management at $210K-$270K. What the role demands is fullstack security capability: run the threat model, build the scanning pipeline, and win over the engineering team, all solo. Add hands-on agent security experience and your scarcity premium climbs fast.

Senior and lead (6+ years) You design the company’s first security organization. Cursor’s Agent & Product Security EM and Discord’s Director of Engineering for Safety show what the management track looks like, with the CISO track above it. As AI infrastructure turns into heavy industry (The Atlantic’s July 2026 piece on data center buildout maps this shift), the assets worth protecting keep growing, and so does the leverage of the people who protect them.