Product Manager - Security & Trust

• Balance the constant tension between security and developer experience at platform scale, finding the right balance between protecting 7M+ developers and keeping them fast. • Lead Supabase's platform security roadmap end to end, from defaults that protect a developer prototyping their first project to advanced controls a Fortune 500 CISO needs. • Lead the security strategy for AI agents that read, write, and deploy on behalf of developers at machine speed.

• Bring 7+ years in product management with serious time on security, identity and access, infrastructure, or developer platform products at a company where security mattered to enterprise buyers. • Hold deep working knowledge of security primitives such as authentication, authorisation including RBAC and RLS, audit logging, secrets management, and OAuth. • Show a track record of leading cross-functional initiatives across Product, Engineering, Security, GTM, and Compliance, driving multi-team RFCs from proposal to shipped code. • Be 100% comfortable in a remote, async, write-it-down culture. • Be an exceptional writer who can draft a customer-facing security disclosure, an internal threat model, a docs page, or a one-pager for a CISO without losing voice or precision.

• Hold compliance fluency from working alongside auditors and security teams on programmes like SOC2, HIPAA, ISO 27001, PCI, or FedRAMP. • Bring technical depth in Postgres, auth systems, or networking primitives. • Have experience designing access models for AI agents or other automated systems. • Show experience shipping security features that enterprise CISOs had to approve before adoption.

• Set the security agenda for the platform, leading the security roadmap from prototyping defaults to Fortune 500 enterprise controls. • Hold the line between security and developer experience, balancing protection against friction at every decision. • Lead the security strategy for AI agents, defining how Supabase authenticates, scopes, and audits agent activity. • Own the security product surface including firewall, security advisors, audit logs, Supabase Vault, just-in-time database access, and IAM primitives. • Define the unified access model across Supabase covering roles, permissions, personal access tokens, OAuth integrations, organisation and project modelling, SSO, and SCIM. • Drive the compliance roadmap beyond existing SOC2 and HIPAA to enable more regulated companies to adopt Supabase. • Be the customer's voice for security, talking to enterprise prospects and regulated customers and translating what you hear into a roadmap. • Ship the docs that go with the code, making security guides on supabase.com the best in the category.

• Work fully remotely from anywhere across EMEA and AMER time zones. • Receive ESOP equity ownership in the company. • Get a tech allowance to set up your ideal work environment. • Receive 100% employer-covered health insurance with 80% coverage for dependents. • Attend annual company off-sites in a new city each year. • Work flexibly and asynchronously with full trust to manage your own time. • Receive a professional development allowance for courses, books, conferences, and learning. • Access a WeWork membership or co-working allowance usable anywhere in the world.

Supabase is the open-source Postgres development platform that 7M+ developers and thousands of enterprises depend on every day. Providing a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search, Supabase is born-remote and open-source-first with around 400 team members across 60+ countries. The company has raised over $1B including a $500M Series F.