Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$165к$190кмедиана$225к
49 в выборке
75
Хорошая вакансия
развернуть
Роль четко определена с акцентом на безопасность продукта в уважаемой компании, но отсутствие информации о зарплате является недостатком.
Кликните для подробной информации
Нет информации о зарплатеСильная компанияЧеткая рольГибкая работа
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Product Security Specialist (Cybersecurity): Evaluating connected-transportation products through source-code analysis, security scanning, threat modeling, penetration testing, and secure architecture reviews with an accent on vulnerability validation, security automation, and developer-focused remediation. Focus on integrating scanners with CI pipelines, identifying coverage gaps, explaining risks to technical and non-technical stakeholders, and improving security-by-design practices across the product lifecycle.
Location: Atlanta, Georgia, USA; flexible hybrid working model with support for in-person and virtual work.
Company
hirify.global develops IoT and connected-transportation products, web-based fleet analytics, and an open platform that processes billions of data points daily.
What you will do
Review internal and external products using source-code, dynamic, dependency, and security architecture reviews.
Trace source code to validate scanner findings across C#, .NET, Java, JavaScript/TypeScript, HTML, Swift, Kotlin, Python, C, and firmware codebases, and provide remediation guidance.
Write, maintain, and refactor Bash and Python automation for scan inputs, scanner execution, CI pipeline integration, Google Cloud storage, and reporting.
Develop secure coding standards and training, prepare technical assessment reports, and explain risks to developers, product owners, management, and other stakeholders.
Monitor emerging threats, identify coverage gaps, follow up on vulnerabilities, and contribute to initiatives improving product security and security-by-design practices.
Requirements
5–8 years of experience in security evaluation or analysis, security code reviews, or relevant development.
Bachelor’s degree in Computer Science, Information Management, Engineering, or a related field, or an equivalent combination of education and work experience.
Experience with source-code, dynamic, and dependency scanners such as Veracode, Fortify, Sentinel, OWASP Dependency-Check, NetSparker, and Qualys.
Knowledge of C, C#, .NET, Python, JavaScript/TypeScript, XML, JSON, SOAP, REST, npm, and NuGet.
Competency with Linux, Windows, GCE, Bash, and Python, plus the ability to rapidly acquire new programming languages.
Exceptional communication skills, accuracy, attention to detail, and the ability to manage multiple tasks and projects simultaneously.
Nice to have
Security certifications.
Experience working in a technical or high-technology engineering industry.
Culture & Benefits
Flexible hybrid working model with in-person and virtual work options.
Home office reimbursement program and reliable internet requirement for home working.
Online learning and networking opportunities, plus virtual social events and collaboration tools.
Parental leave top-up, baby bonus, medical and dental benefits, and retirement savings program for full-time permanent employees.
Electric vehicle purchase incentive and support for work-life balance.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →