Назад
Company hidden
4 дня назад

Senior Product Security Engineer

150 000 - 200 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Product Security Engineer (DevSecOps/Cloud Security): Building product security APIs, tooling, and secure development practices across the Harness software delivery platform with an accent on threat modeling, penetration testing, and vulnerability remediation. Focus on integrating SAST, DAST, and SCA into CI/CD pipelines, securing cloud-native applications and APIs, and designing authentication and authorization solutions.

Location: Remote within the U.S.

Salary: $150,000–$200,000 USD annually

Company

hirify.global is an AI software delivery platform company that provides automation, governance, security, reliability, and cost optimization across the software delivery lifecycle.

What you will do

  • Design and develop product security APIs, tools, and utilities for internal and external stakeholders.
  • Conduct threat modeling and secure design reviews for backend services and business integrations.
  • Perform advanced penetration testing and adversarial attack simulations across platform modules, APIs, and code.
  • Lead manual and automated code reviews to identify vulnerabilities, weaknesses, and anti-patterns.
  • Implement SAST, DAST, and SCA tooling and integrate security controls into CI/CD pipelines.
  • Advise Engineering and Product teams on security standards, vulnerability remediation, security architecture, and secure-by-design delivery.

Requirements

  • BS in Computer Science or a related field.
  • 5+ years of relevant industry experience with a strong security focus.
  • Experience with DevSecOps practices, secure SDLC methodologies, and vulnerability management workflows.
  • Knowledge of OWASP, SANS, NIST, and CIS security frameworks.
  • Experience with cloud environments such as Kubernetes, AWS, GCP, or Azure, preferably in a cloud-native environment.
  • Proficiency in Java or a comparable language, object-oriented programming, enterprise applications, and API development.

Culture & Benefits

  • Remote work for candidates located in the U.S.
  • Collaboration with global Engineering and Product teams across 27 countries.
  • Opportunity to work on AI-powered software delivery, security automation, and secure development practices.
  • Employment opportunity with pay transparency.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →