Principal Product Security Researcher (Cybersecurity)

Location: Remote; listed locations include the United States, Canada, and the United Kingdom.

Base salary: $201,000–$226,000 USD.

Company

hirify.global delivers hardened, secure, and production-ready builds of open source software for organizations including Fortune 500 enterprises and global industry leaders.

What you will do

• Own the product security research agenda by scanning the broader ecosystem, identifying emerging attack patterns, and translating findings into risks and opportunities.
• Research emerging threats and trends in software supply chain and product security and assess their impact on products and customers.
• Design pragmatic mitigations across people, process, and technology and drive adoption.
• Partner with Product, Engineering, Security, executive, and senior engineering leadership to shape strategy, architecture decisions, roadmaps, and long-term plans.
• Identify systemic weaknesses, address root causes, and develop durable security improvements.
• Mentor Product Security and Engineering colleagues and represent hirify.global through talks, conferences, and thought leadership.

Requirements

• Deep experience in product or application security, with a track record of leading research or threat-focused work that produced clear company-level outcomes.
• Expert knowledge across multiple areas including secure architecture, application or product security, software supply chain security, and organization-level risk management.
• Ability to balance security, velocity, and reliability.
• Ability to own ambiguous, cross-functional problems and turn them into structured, prioritized initiatives that ship and persist.
• Proven ability to present complex ideas to executive stakeholders, gain alignment, and drive high-level decisions.
• Ability to apply current industry trends, tools, and research methods pragmatically.
• Ability to work independently with high ownership, collaborate generously, and create structure in fast-evolving, uncertain contexts.

Culture & Benefits

• Remote-first culture with team meetups, bi-annual destination summits, and a monthly coworking, phone, and internet stipend.
• Stock options upon hire and promotion, participation in secondary offerings, and a 10-year exercise period.
• 100% covered health, vision, and dental insurance premiums for employees and dependents.
• Flexible time off.
• Paid parental leave of 18 weeks for birthing parents and 12 weeks for non-birthing parents.
• Values include customer focus, intentional action, transparency, trust, and assuming good intentions.