Назад
Company hidden
7 дней назад

Senior Software Engineer (Security)

200 000 - 215 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Software Engineer (Security) (TypeScript/Node/React/AWS): Building authentication, authorization, abuse detection, vulnerability remediation, and secure internal tooling for a high-traffic creator platform with an accent on application security, identity, secrets management, and third-party access. Focus on threat modeling systems, designing controls that reduce entire vulnerability classes, and balancing risk reduction with creator experience.

Location: Must be based in Los Angeles or San Francisco and work hybrid from one of the offices

Salary: $200,000–$215,000 annual cash compensation in the San Francisco Bay or Los Angeles area

Company

hirify.global provides a platform that helps creators, brands, and businesses curate, grow, and monetize their digital presence.

What you will do

  • Design and ship authentication, authorization, session, token, secrets management, and third-party access improvements.
  • Build abuse, account takeover, scraping, and fraud detection and response capabilities.
  • Threat model new and existing systems and turn findings into prioritized engineering work.
  • Develop internal tooling and paved paths that help engineers build securely by default.
  • Triage and remediate vulnerabilities from internal findings, bug bounties, and penetration tests.
  • Partner with Engineering, Product, and Trust & Safety while mentoring engineers through reviews, pairing, and documentation.

Requirements

  • 4+ years of professional software engineering experience, including meaningful experience in security, infrastructure, identity, or a similarly critical domain.
  • Strong full-stack skills with TypeScript, Node, React, GraphQL, PostgreSQL or MySQL, and AWS.
  • Knowledge of OWASP Top 10, authentication and authorization, secrets management, practical cryptography, and common consumer-platform attack classes.
  • Experience threat modeling real systems and shipping the resulting improvements.
  • Experience safely changing high-traffic critical paths using feature flags, staged rollouts, migrations, and backward compatibility.
  • Fluency with AI-assisted development tools and the ability to validate and refine their output while managing associated risks.

Nice to have

  • Experience balancing application security controls with user experience and creator friction.
  • Experience influencing engineers outside the immediate team without relying on formal authority.

Culture & Benefits

  • Flexible hybrid or fully remote work environment, with this role requiring hybrid work from a Los Angeles or San Francisco office.
  • Autonomy in structuring workdays and asynchronous collaboration where possible.
  • Wellbeing allowance for fitness, development, childcare, travel, charitable donations, pet insurance, or home-office setup.
  • Medical, dental, vision, disability, and life insurance coverage for US-based employees.
  • Employer retirement contributions, generous paid time off, parental and volunteer leave, and an employee stock option program.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →