Descripción de la oferta
ppSupabase is the Postgres development platform, built by developers for developers to help them ship countless products that people love. More than 7 million developers trust us with their data, and we are custodians of every byte of it. Security is foundational to that trust, and as we move deeper into AI-native development, regulated industries, and enterprise, it shapes whether a developer chooses us on day one and whether a regulated company can build their most sensitive workloads on Supabase. /ph3bAbout the role /b /h3pWe're looking for a PM who can balance the constant tension between security and developer experience at platform scale. Every control you add is friction a developer has to absorb, and every default you loosen is a door an attacker could walk through. Finding the right balance between protecting customers and keeping them fast is the work of this role. /ppYou’ll partner with Security Engineering, Compliance, and the platform teams that own auth, networking, and audit. /ppbThis is a remote position and we're open to considering candidates located across EMEA and AMER time zones. /b /ph3bIn This Role You Will /b /h3ullipbSet the security agenda for the platform. /b Lead Supabase's platform security roadmap end-to-end, from the defaults that protect a developer prototyping their first project to the advanced controls a Fortune 500 CISO needs before approving us. /p /lilipbHold the line between security and developer experience. /b Every security feature trades protection against friction. A control that's too strict pushes developers off the platform; one that's too easy to bypass doesn't protect anyone. /p /lilipbLead our security strategy for AI agents. /b Agents now read, write, and deploy on behalf of developers and companies, often at machine speed. You'll lead how Supabase authenticates, scopes, and audits agent activity so customers can give them real capability while staying in control of their data. /p /lilipbOwn our security product surface. /b Drive the roadmap for the security tooling customers use to operate safely on Supabase: firewall, security advisors, audit logs, Supabase Vault, just-in-time database access, and the IAM primitives that let regulated customers get to "yes" with their security team. /p /lilipbDefine the unified access model across Supabase. /b Roles, permissions, personal access tokens, OAuth integrations, organization and project modeling, SSO, and SCIM are foundational to how customers manage who can do what. You'll set the strategy that ties them together and drive the cross-cutting RFCs from proposal to shipped code. /p /lilipbDrive the compliance roadmap. /b Supabase already runs a strong compliance program with SOC2 and HIPAA in place. Your job is to define what comes next so more regulated companies can adopt us. /p /lilipbBe the customer's voice for security. /b Talk to enterprise prospects, regulated customers, and the security teams behind them. Translate what you hear into a roadmap that earns trust at every customer size, from the indie hacker prototyping their first project to the Fortune 500 CISO evaluating us for their most regulated workloads. /p /lilipbShip the docs that go with the code. /b Make the security guides on supabase.com the best in the category: clear, opinionated, and trustworthy enough that a developer evaluating us comes away convinced. /p /li /ulh3bYou Might Be a Good Fit If You /b /h3ullipHave 7+ years in product management, with serious time on security, identity and access, infrastructure, or developer platform products at a company where security mattered to enterprise buyers. /p /lilipHave deep working knowledge of the security primitives our customers use like authentication, authorization (RBAC, RLS), audit logging, secrets management, OAuth. /p /li lipHave a track record of leading cross-functional initiatives across Product, Engineering, Security, GTM, and Compliance, and driving multi-team RFCs from proposal to shipped code. /p /li lipAre 100% comfortable in a remote, async, write-it-down culture. /p /li lipAre an exceptional writer. You can draft a customer-facing security disclosure, an internal threat model, a docs page, or a one-pager for a CISO without losing voice or precision. /p /li /ulh3bNice to have /b /h3ullipCompliance fluency. You've worked alongside auditors and security teams on programs like SOC2, HIPAA, ISO 27001, PCI, or FedRAMP, and you can tell which requirements are real customer needs and which are checkbox theater. /p /li lipTechnical depth in Postgres, auth systems, or networking primitives. /p /li lipExperience designing access models for AI agents or other automated systems. /p /li lipShipped security features that enterprise CISOs had to approve before adoption. /p /li /ulh3bWhat We Offer /b /h3ullipbFully Remote /b /ppWe hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co‑working allowance you can use anywhere in the world. /p /li lipbESOP /b /ppEvery team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together. /p /li lipbTech Allowance /b /ppUse this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work. /p /li lipbHealth Benefits /b /ppSupabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us. /p /li lipbAnnual Off‑Sites /b /ppOnce a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year. /p /li lipbFlexible Work /b /ppWe operate asynchronously and trust you to manage your own time. You know what needs to be done and when. /p /li lipbProfessional Development /b /ppEvery team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth. /p /li /ulh3bAbout the Team /b /h3pSupabase was born‑remote and open‑source‑first. We believe our globally distributed team is our secret weapon in building tools developers love. /pullip280+ team members /p /li lip55+ countries /p /li lip20+ languages spoken /p /li lip$500M raised /p /li lip500,000+ community members /p /li /ulpWe move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open‑source ecosystem and strive to support—not replace—existing tools and communities. /ph3bHiring Process /b /h3pWe keep things simple, async‑friendly, and respectful of your time: /pollipApply – Our team will review your application. /p /li lipIntro Call – A short video chat to get to know each other. /p /li lipInterviews – Up to four calls with: /pullipTeam Leads /p /li lipFuture teammates /p /li lipSomeone cross‑functional from product, growth, or engineering (depending on the role) /p /li lipSomeone from our leadership/founding team /p /li /ul /li lipDecision – We may follow up with a final question or go straight to offer. /p /li /olpAll communication is remote and we aim to move fast. /p /p #J-18808-Ljbffr
