Principal Product Security Engineer

Location: U.S. Remote; must be based in the United States

Estimated base salary: $170,000–$200,000 per year, plus potential equity and bonus.

Company

hirify.global develops a cloud-native Identity Security Platform for securing human and machine identities across cloud infrastructure, traditional infrastructure, data, SaaS applications, and AI.

What you will do

• Provide technical leadership and shape the strategy, future state, and multi-year roadmap for the Product Security Program.
• Lead secure design reviews, security architecture assessments, threat modeling, and product risk documentation.
• Advise product, architecture, development, DevOps, and cloud engineering teams on secure product strategy and security architecture adoption.
• Expand and mature the S-SDLC program, integrating cloud, container, application, and infrastructure security standards into CI/CD pipelines.
• Automate product and cloud security operations, respond to security incidents, and support customer security inquiries and audits.
• Mentor Product Security team members and communicate security risks and recommendations to technical and non-technical stakeholders.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience.
• 12 years of professional cybersecurity experience, including at least 7 years in Product Security.
• Experience with security architecture, threat modeling, secure design reviews, and SSDLC processes.
• Knowledge of cloud security, cryptography, SaaS multi-tenant architecture, REST APIs, containers, and application security testing.
• Experience integrating security testing tools into development pipelines and working with defect tracking and source code management systems.
• Strong leadership, analytical, communication, and stakeholder-influence skills.

Nice to have

• Experience using AI to augment threat modeling and secure design reviews.
• Knowledge of cybersecurity frameworks, risk management, NIST, ISO 27001, CIS, and GDPR.
• Experience with container, serverless, network, application, and access-management security.
• Software engineering experience, cybersecurity certifications, and proficiency with Azure and AWS.

Culture & Benefits

• Fully remote work for candidates based in the United States.
• Collaborative, respectful, innovative environment focused on meaningful cybersecurity work.
• Competitive salary, performance-based bonus opportunities, and potential equity.
• Healthcare insurance, retirement matching, life insurance, employee assistance program, paid time off, and paid company holidays.