Назад
Company hidden
6 дней назад

Senior Product Security Engineer (Application Security)

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Product Security Engineer (Application Security): Driving security strategy, architecture, and automated controls across CLEAR’s identity products and software development lifecycle with an accent on secure-by-design practices, threat modeling, and scalable security testing. Focus on leading complex architecture reviews, integrating security into CI/CD pipelines, and mentoring engineering teams across web, mobile, cloud, biometric, and embedded environments.

Location: New York, New York, United States; onsite

Total compensation: $225,000–$300,000, including base salary and new-hire equity.

Company

hirify.global develops a secure identity platform for safer, frictionless experiences across airports, stadiums, and everyday life.

What you will do

  • Drive application security strategy and implementation across hirify.global products and engineering teams.
  • Partner with engineering leadership to align security initiatives with technology and product roadmaps.
  • Provide technical leadership for secure architecture, design, development, threat modeling, and risk assessments.
  • Design and implement scalable automated security controls and testing frameworks in CI/CD pipelines.
  • Advise Engineering, DevOps, Product, GRC, and IT teams on secure-by-design practices and customer fraud and identity initiatives.
  • Mentor the Application Security team and broader engineering community.

Requirements

  • 5+ years of experience in Application Security or Software Engineering with impact across security architecture, strategy, and execution.
  • Expertise in secure application design, SDLC integration, penetration testing, threat modeling, and exploit development.
  • Experience leading security reviews and influencing architecture in complex, regulated, or high-scale environments.
  • Knowledge of web and mobile platforms, authentication protocols, API security, cloud-native applications, and security tooling.
  • Proficiency in multiple programming languages, such as Python, Java, JavaScript, or Go, plus scripting with Bash.
  • Experience with mobile security, biometric systems, embedded technologies, tools such as Burp Suite or OWASP ZAP, and compliance frameworks including PCI, NIST 800-53, FedRAMP, or ISO 27001.

Culture & Benefits

  • Bright, open-concept offices with conference rooms, coworking spaces, catered lunches, and stocked kitchens.
  • Healthcare plans and family-building benefits, including fertility, adoption, and surrogacy support.
  • Flexible time off, annual wellness stipend, learning and development reimbursements, and OneMedical memberships.
  • hirify.global Plus membership and a 401(k) retirement plan with employer match.
  • Additional refresh equity grants may be provided through the ongoing compensation program.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →