Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Мало
$190к-220к/год
$180к$210кмедиана$250к
По похожим ролям (50) ~ $210к/год
77
Хорошая вакансия
развернуть
Чётко описанная роль principal-уровня в миссионной организации предлагает широкий круг задач и понятную оплату, но зарплата ниже медианы рынка, а требование проводить в офисе 60% рабочего месяца ограничивает гибкость.
Кликните для подробной информации
Ниже рынкаЧастые поездки в офисПонятные задачиСовременная безопасностьЗначимая миссия
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Principal Product Security Architect (Application Security/DevSecOps): Building scalable security tooling, automation, architecture, and frameworks that protect cloud-native applications and infrastructure across scientific and educational initiatives with an accent on secure SDLC integration, vulnerability prevention, and security governance. Focus on designing reference architectures, embedding SAST/DAST and threat modeling into development workflows, and solving complex security challenges across distributed systems, containers, and major cloud platforms.
Location: Redwood City, California, United States; hybrid work with onsite presence at least 60% of the working month, approximately 3 days per week.
Salary: $190,000–$220,150 base pay per year, plus potential eligibility for a discretionary annual performance bonus.
Company
hirify.global is a mission-driven nonprofit organization using technology, AI, and scientific and educational innovation to address major societal challenges through Biohub and Learning Commons.
What you will do
Design, develop, and improve security tooling, automation, architectures, and frameworks for enterprise application and infrastructure teams.
Shift vulnerability detection and prevention left into software development workflows and provide actionable technical security guidance.
Lead end-to-end security projects, including requirements gathering, scoping, prioritization, delivery milestones, and stakeholder updates.
Define metrics for compliance, program health, and risk posture, and coordinate with vendors and auditors.
Act as a subject matter expert in application, infrastructure, and architecture security for technical and non-technical stakeholders.
Support security reviews, threat modeling, architecture risk assessments, and incident response for applications and production infrastructure.
Requirements
5+ years of technical program management or equivalent experience focused on security or application security.
Strong knowledge of secure SDLC, DevSecOps, security automation, infrastructure-as-code security, and vulnerability management.
Hands-on experience with security controls in CI/CD pipelines, SAST, DAST, software composition analysis, threat modeling, and rapid remediation.
Experience with container security, Docker, Kubernetes, microservices, and AWS, Azure, or GCP security.
Ability to design and govern security architectures, reference architectures, security patterns, and control standards across complex cloud-native and hybrid environments.
Experience conducting architecture risk assessments and design reviews aligned with zero trust, defense-in-depth, and compliance requirements.
Culture & Benefits
Collaborative, mission-driven work supporting scientific and educational innovation.
Hybrid work environment with regular in-person collaboration.
Employer match on employee 401(k) contributions.
Paid time off for volunteering and funding for select family-forming benefits.
Relocation support is available for employees who need assistance moving.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →