Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Очень мало
$110к-120к/год
$120к$140кмедиана$170к
По похожим ролям (46) ~ $140к/год
На СНГ рынке: $3к/мес ($2к - $3.8к)
66
Средняя вакансия
развернуть
Обязанности описаны четко, а пакет льгот выглядит сильным, но зарплата заметно ниже рыночного ориентира, что снижает привлекательность вакансии.
Кликните для подробной информации
Ниже рынкаЧеткие задачиСильные льготыОбразовательная миссия
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Platform Security Engineer (DevSecOps): Building security automation, vulnerability-management workflows, and secure software delivery controls across applications, dependencies, containers, and infrastructure with an accent on DevSecOps integration, software supply chain security, and developer enablement. Focus on evaluating SAST, DAST, SCA, and secret-scanning tools, designing secure-by-default guardrails, and reducing manual remediation through automation.
Location: Remote within the continental United States; candidates must be able to work and reside in the continental U.S. Immigration sponsorship is not available.
Salary: $110,000–$120,000 per year.
Company
hirify.global provides JSTOR, Portico, and hirify.global S+R services that expand access to knowledge and education.
What you will do
Build and improve vulnerability-management workflows and tooling across applications, dependencies, containers, and infrastructure.
Integrate security checks and policy controls into software delivery pipelines and developer workflows.
Improve dependency management, package governance, and software supply chain security.
Evaluate, implement, and tune SAST, DAST, SCA, secret-scanning, and related platform security controls.
Build automation to reduce repetitive remediation work and promote secure-by-default patterns, templates, and guardrails.
Partner with engineers, architects, and technical leaders to triage findings, prioritize risks, document secure development practices, and measure control effectiveness.
Requirements
3–5 years of experience in security engineering, platform engineering, DevSecOps, or a closely related technical role.
Hands-on experience implementing security tooling and controls in modern software delivery environments.
Experience with vulnerability management, dependency management, package governance, or software supply chain security.
Familiarity with CI/CD, source control workflows, infrastructure automation, and cloud-based application environments.
Ability to write scripts or automation that improve security processes and reduce manual effort.
Strong judgment when balancing risk reduction, developer experience, and delivery needs.
Clear communication skills and the ability to work effectively with engineers, architects, and business stakeholders.
Ability to work independently and collaboratively on substantive technical work while guiding peers in an area of specialty.
Nice to have
Experience with AWS infrastructure and services and common engineering tooling used in modern product organizations.
Experience using AI-enabled tooling in security or platform engineering.
Culture & Benefits
Distributed work across the continental United States with physical offices in New York and Ann Arbor, Michigan.
Medical, dental, and vision plans for benefits-eligible employees.
Employer-paid 10% retirement contribution.
Paid parental and caregiver leave, 22 days of paid time off, and 11 paid holidays.
Up to 12 paid sick days, wellness benefits, and a culture centered on belonging, evidence, speed, teamwork, and trust.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →