Staff Engineer, Product Trust

Postman's API platform is used by more than 45 million developers and 500,000 organisations including 98 percent of the Fortune 500, and Product Trust is the function that keeps that platform safe and dependable as it grows. The security specifics in the requirements tell you where the work actually concentrates: vault stores, token scanning and cryptography. Those are the problems of a product where users routinely store credentials and secrets alongside their API collections, and where a leak would be both a security failure and a trust failure. The posting asks for ten or more years of hands on coding and, separately, ten or more years building end to end backend services, alongside a record of leading cross functional projects with meaningful business impact and designing highly scalable systems. This is one of the two most senior listings in today's edition, and the ten year figures are stated twice rather than approximated, so treat them as firm.

What the posting requires

- 10+ years of hands on coding, with familiarity across common programming languages such as C, C++, Java, PHP, Python, JavaScript and NodeJS
- 10+ years of engineering experience building end to end backend services
- Strong experience with security offerings such as vault stores, token scanning and cryptography
- Demonstrated experience leading cross functional projects with meaningful impact on the business
- Exceptional problem solving, design and analytical skills
- Demonstrated experience designing highly scalable systems
- A bachelor's degree in a computer science related field, or equivalent practical experience

What the work concentrates on

Keeping the platform trustworthy for a user base that stores credentials and secrets alongside their API work. The named security areas, vault storage, token scanning and cryptography, point at secret handling and leak prevention rather than general application security.

Know this before you apply

The same in office model applies as Postman's other Bengaluru opening: employees based in Bangalore currently work in the office three days a week, moving to five days per week by the end of the year.

Location and working pattern

Bengaluru, on the schedule above.

A good fit if

You have a decade of backend engineering and want scope over trust, security and reliability rather than feature delivery, and you have real cryptography or secret management experience to point to.

Think twice if

You are earlier in your career, or your security exposure is general rather than hands on with vaults, tokens and cryptography. Both the coding and the backend service requirements are stated as ten years, so this is not a stretch application.