🛠 Tech Stack

💼 About This Role

You'll set the security agenda for Supabase's developer platform, balancing protection with developer experience. Your work will directly shape how millions of developers trust and use Supabase, from indie hackers to Fortune 500 companies. You'll also lead security strategy for AI agents, ensuring safe, scoped access to customer data.

🎯 What You'll Do

• Set the platform security roadmap end-to-end.
• Balance security controls against developer friction.
• Define security strategy for AI agent authentication and auditing.
• Own security product surface: firewall, audit logs, Vault, IAM.
• Drive cross-functional RFCs for unified access model.

📋 Requirements

• 7+ years in product management on security, identity, or infrastructure products.
• Deep working knowledge of authentication, authorization (RBAC, RLS), audit logging, secrets management, OAuth.
• Track record leading cross-functional initiatives across Product, Engineering, Security, GTM, and Compliance.
• Comfortable in a remote, async, write-it-down culture.

✨ Nice to Have

• Compliance fluency with SOC2, HIPAA, ISO 27001, PCI, or FedRAMP.
• Technical depth in Postgres, auth systems, or networking primitives.
• Experience designing access models for AI agents.

🎁 Benefits & Perks

• 🏠 Fully Remote with co-working allowance.
• 📈 ESOP equity ownership for every team member.
• 💻 Tech Allowance for workspace setup.
• 🏥 Health Benefits 100% coverage for employees, 80% for dependents.
• 🌍 Annual Off-Sites in a new city each year.

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Hiring Manager Interview· 45 min
3. 3Technical/Product Deep Dive· 60 min
4. 4Cross-functional Panel· 60 min
5. 5Offer· 30 min