Senior Product Security Engineer

About Life360 Life360’s mission is to keep people close to the ones they love. Our category-leading mobile app,Tile tracking devices, and Pet GPS tracker empower members to protect the people, pets, and things they care about most with a range of services, including location sharing, safe driver reports, and crash detection with emergency dispatch. Life360 serves approximately 97.8 million monthly active users (MAU), as of March 31, 2026, across more than 180 countries. Life360 delivers peace of mind and enhances everyday family life with seamless coordination for all the moments that matter, big and small. By continuing to innovate and deliver for our customers, we have become a household name and the must-have mobile-based membership for families (and those friends who are basically family). Life360 has more than 500 (and growing!) remote-first employees. For more information, please visit life360.com . Life360 is a Remote-First company, which means a remote work environment will be the primary experience for all employees. All positions, unless otherwise specified, can be performed remotely (within the US) regardless of any specified location above. We are AI Native We are building an AI native company where AI is an integral part of how we build and operate. AI tool usage during interviews varies by role. You may be asked to demonstrate proficiency with AI tools, discuss how you leverage AI, or complete interview exercises without AI assistance. Your Recruiter will provide clear guidance as you move through the interview process. Undisclosed use of AI not previously discussed with or approved by your Recruiter may impact your candidacy. About The Team The Information Security and Technology team is responsible for keeping Life360 safe — our systems, our employees, and the tens of millions of families who trust us with their location data. That obligation is the starting point. How we meet it is what makes this team different. We are builders. Security controls that don't get used aren't controls. Compliance programs that create friction without reducing risk aren't programs. We build things that work in production, earn adoption from engineering teams, and get better over time — and we use AI to do it at a scale a traditional team couldn't. We're also at an inflection point. Life360 is deploying agentic systems into how we build and operate, and the security and governance implications of that are still being worked out — by us, and by the industry. The threat surface is expanding. The compliance frameworks are catching up. The people on this team aren't waiting for either. About the Job Product Security at Life360 sits at the intersection of a consumer platform trusted by nearly 100 million families and an engineering organization moving fast into AI-native development. This role is engaged across product and platform teams as a security partner, not a gate. You'll conduct design reviews, build secure defaults, drive vulnerability management, and help shape how we ship safely across mobile, backend, data pipelines, and an expanding surface of AI-powered features. We use AI tools as a professional standard on this team. That means daily use for real work, full ownership of what you ship, and the judgment to know where AI helps and where it needs guardrails. You'll bring that same lens to the products you secure: frontier model integrations, agentic workflows, and sensitive data pipelines handling real-time location and family data. We use AI tools as a professional standard on this team. Here's what that means in practice. Ai-Native Daily use: You use AI tools for real, substantive work — analysis, drafting, automation, code, investigations, evidence gathering. Judgment and ownership: AI-generated work gets the same scrutiny you'd give any human-produced artifact. You're accountable for everything you ship. Domain-specific judgment: You know where AI is the wrong tool. Sensitive data handling, attacker-controlled inputs, agents with production access, and privileged identity changes all need careful guardrails — and you can articulate where AI helps, where it hurts, and where it needs a human in the loop. Leverage: When AI is working well, you take on problems that would otherwise require a larger team. We hire people who use that leverage to ship better outcomes, not just faster ones. Continuous learning: The tooling moves fast. You stay current, share what works with the team, and speak up when something would meaningfully change how we operate. The US-based salary range for this position is $152,000 to $224,000. We take into consideration an individual's background and experience in determining final salary - therefore, base pay offered may vary considerably depending on geographic location, job-related knowledge, skills, and experience. The compensation package includes a wide range of medical, dental, vision, financial, and other benefits, as well as equity. What You’ll Do Security Partner Engagement Conduct security architecture reviews across mobile (iOS/Android), backend (Java, Python, PHP), data pipelines, and third-party integrations. You're the security partner teams come to during design, not after. Translate threat models and security requirements into pragmatic guidance engineers can act on. Build trusted relationships with product and platform engineering teams Tooling & Secure Defaults Further operationalize and tune ASPM tooling (Cycode) to unify SAST, SCA, secret scanning, and container security into actionable signal, not noise. Build security-as-code patterns and pre-approved libraries that make the secure path the default path. Automate vulnerability triage, deduplication, and routing so the team spends time on judgment, not toil. Vulnerability Management Drive SLA-based remediation workflows with clear severity definitions, ownership, and escalation paths. Build metrics that translate security posture into language engineering leadership and executives can use. AI & Emerging Platform Security Partner on design reviews for AI-powered features: model access controls, data boundary enforcement, and retrieval system authorization. Contribute to securing agent workflows, MCP integrations, and shared AI tooling as adoption scales across engineering. Work with Privacy, Legal, and Data Platform on controls for sensitive data: real-time location, family relationships, and data involving minors. What We’re Looking For 5+ years in application security, product security, or DevSecOps with a track record of shipping controls that earn adoption, not just approval. Hands-on builder. You define secure patterns, write code, and deliver tooling that holds up in production. You're a practitioner, not just an advisor. Experience conducting threat models and security architecture reviews across mobile (iOS/Android), cloud (AWS/GCP), and backend services (Java, Python, PHP). You catch design flaws that automated tools miss. Practical experience securing AI/ML systems. You've worked with prompt pipelines, RAG architectures, model access controls, or agentic workflows and understand the trust, authorization, and data boundary problems they introduce. Working knowledge of ASPM platforms and security tooling: SAST, SCA, secret scanning, container scanning. You've tuned these to produce signal, not noise. Familiarity with CI/CD security integration. You've built security into pipelines without breaking developer velocity. Solid grounding in secure development practices: OWASP Top 10, OWASP LLM Top 10, secure-by-design principles, and practical remediation guidance. Comfort with ambiguity. You're energized by first-draft standards, testing approaches, and scaling what works rather than waiting for a playbook. Strong cross-functional communication. You carry risk, tradeoffs, and technical decisions across engineering, product, and leadership without losing precision. You can reshape a risky decision clearly and constructively. Nice to Have Experience with multi-agent orchestration frameworks and their identity and authorization challenges. Background in consumer technology or privacy-sensitive domains where personal data is a core product obligation, not just a legal checkbox. Experience securing location-based services or products involving data from minors. CISSP, OSCP, GWAPT, or similar certifications. Contributions to open-source security tools, public research, or conference speaking. Our Benefits Competitive pay and benefits Medical, dental, vision, life and disability insurance plans (100% paid for employees) 401(k) plan with company matching program Mental Wellness Program & Employee Assistance Program (EAP) for mental well-being Flexible PTO, 13 company-wide days off throughout the year Winter and Summer Weeklong Synchronized Company Shutdowns Learning & Development programs Equipment, tools, and reimbursement support for a productive remote environment Free Life360 Platinum Membership for your preferred circle Free Tile Products Life360 Values Our company’s mission-driven culture is guided by our shared values to create a trusted work environment where you can bring your authentic self to work and make a positive difference Be a Good Person - We have a team of high integrity people you can trust. Be Direct With Respect - We communicate directly, even when it’s hard. Members Before Metrics - We focus on building an exceptional experience for families. High Intensity, High Impact - We do whatever it takes to get the job done. Our Commitment to Diversity We believe that different ideas, perspectives and backgrounds create a stronger and more creative work environment that delivers better results. Together, we continue to build an inclusive culture that encourages, supports, and celebrates the diverse voices of our employees. It fuels our innovation and connects us closer to our customers and the communities we serve. We strive to create a workplace that reflects the communities we serve and where everyone feels empowered to bring their authentic best selves to work. We are an equal opportunity employer and value diversity at Life360. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status or any legally protected status. We encourage people of all backgrounds to apply. We believe that a diversity of perspectives and experiences create a foundation for the best ideas. Come join us in building something meaningful. Even if you don’t meet 100% of the below qualifications, you should still seriously consider applying! #LI-Remote ____________________________________________________________________________