Назад
Company hidden
6 дней назад

Principal Product Security Architect

190 000 - 220 150$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Principal Product Security Architect (Application Security/DevSecOps): Building scalable security tooling, automation, architecture, and frameworks that protect cloud-native applications and infrastructure across scientific and educational initiatives with an accent on secure SDLC integration, vulnerability prevention, and security governance. Focus on designing reference architectures, embedding SAST/DAST and threat modeling into development workflows, and solving complex security challenges across distributed systems, containers, and major cloud platforms.

Location: Redwood City, California, United States; hybrid work with onsite presence at least 60% of the working month, approximately 3 days per week.

Salary: $190,000–$220,150 base pay per year, plus potential eligibility for a discretionary annual performance bonus.

Company

hirify.global is a mission-driven nonprofit organization using technology, AI, and scientific and educational innovation to address major societal challenges through Biohub and Learning Commons.

What you will do

  • Design, develop, and improve security tooling, automation, architectures, and frameworks for enterprise application and infrastructure teams.
  • Shift vulnerability detection and prevention left into software development workflows and provide actionable technical security guidance.
  • Lead end-to-end security projects, including requirements gathering, scoping, prioritization, delivery milestones, and stakeholder updates.
  • Define metrics for compliance, program health, and risk posture, and coordinate with vendors and auditors.
  • Act as a subject matter expert in application, infrastructure, and architecture security for technical and non-technical stakeholders.
  • Support security reviews, threat modeling, architecture risk assessments, and incident response for applications and production infrastructure.

Requirements

  • 5+ years of technical program management or equivalent experience focused on security or application security.
  • Strong knowledge of secure SDLC, DevSecOps, security automation, infrastructure-as-code security, and vulnerability management.
  • Hands-on experience with security controls in CI/CD pipelines, SAST, DAST, software composition analysis, threat modeling, and rapid remediation.
  • Experience with container security, Docker, Kubernetes, microservices, and AWS, Azure, or GCP security.
  • Ability to design and govern security architectures, reference architectures, security patterns, and control standards across complex cloud-native and hybrid environments.
  • Experience conducting architecture risk assessments and design reviews aligned with zero trust, defense-in-depth, and compliance requirements.

Culture & Benefits

  • Collaborative, mission-driven work supporting scientific and educational innovation.
  • Hybrid work environment with regular in-person collaboration.
  • Employer match on employee 401(k) contributions.
  • Paid time off for volunteering and funding for select family-forming benefits.
  • Relocation support is available for employees who need assistance moving.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →