Назад
Company hidden
обновлено 8 дней назад

Product Security Specialist (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Product Security Specialist (Cybersecurity): Evaluating connected-transportation products through source-code analysis, security scanning, threat modeling, penetration testing, and secure architecture reviews with an accent on vulnerability validation, security automation, and developer-focused remediation. Focus on integrating scanners with CI pipelines, identifying coverage gaps, explaining risks to technical and non-technical stakeholders, and improving security-by-design practices across the product lifecycle.

Location: Atlanta, Georgia, USA; flexible hybrid working model with support for in-person and virtual work.

Company

hirify.global develops IoT and connected-transportation products, web-based fleet analytics, and an open platform that processes billions of data points daily.

What you will do

  • Review internal and external products using source-code, dynamic, dependency, and security architecture reviews.
  • Trace source code to validate scanner findings across C#, .NET, Java, JavaScript/TypeScript, HTML, Swift, Kotlin, Python, C, and firmware codebases, and provide remediation guidance.
  • Conduct vulnerability assessments, penetration testing, threat modeling, code reviews, and secure architecture assessments.
  • Write, maintain, and refactor Bash and Python automation for scan inputs, scanner execution, CI pipeline integration, Google Cloud storage, and reporting.
  • Develop secure coding standards and training, prepare technical assessment reports, and explain risks to developers, product owners, management, and other stakeholders.
  • Monitor emerging threats, identify coverage gaps, follow up on vulnerabilities, and contribute to initiatives improving product security and security-by-design practices.

Requirements

  • 5–8 years of experience in security evaluation or analysis, security code reviews, or relevant development.
  • Bachelor’s degree in Computer Science, Information Management, Engineering, or a related field, or an equivalent combination of education and work experience.
  • Experience with source-code, dynamic, and dependency scanners such as Veracode, Fortify, Sentinel, OWASP Dependency-Check, NetSparker, and Qualys.
  • Knowledge of C, C#, .NET, Python, JavaScript/TypeScript, XML, JSON, SOAP, REST, npm, and NuGet.
  • Competency with Linux, Windows, GCE, Bash, and Python, plus the ability to rapidly acquire new programming languages.
  • Exceptional communication skills, accuracy, attention to detail, and the ability to manage multiple tasks and projects simultaneously.

Nice to have

  • Security certifications.
  • Experience working in a technical or high-technology engineering industry.

Culture & Benefits

  • Flexible hybrid working model with in-person and virtual work options.
  • Home office reimbursement program and reliable internet requirement for home working.
  • Online learning and networking opportunities, plus virtual social events and collaboration tools.
  • Parental leave top-up, baby bonus, medical and dental benefits, and retirement savings program for full-time permanent employees.
  • Electric vehicle purchase incentive and support for work-life balance.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →