Staff Product Security Engineer

Location: US Remote; candidates must be located in the United States

Salary: $179,900–$269,900 USD for Zone 1 locations (CA, CT, DC, MD, MA, NJ, NY, VA, WA); $168,200–$252,200 USD for all other US locations. International compensation varies by location.

Company

hirify.global builds SaaS products and is transforming product security into an embedded engineering partnership across more than 80 R&D teams.

What you will do

• Embed with an engineering portfolio and participate in planning, architecture, and technical design reviews.
• Lead threat modeling, translate security requirements into deliverable engineering requirements, and maintain an evidence-backed portfolio risk picture.
• Partner with portfolio VPs and engineering leaders to prioritize remediation, manage vulnerability SLAs, and document risk exceptions.
• Adapt and drive adoption of secure service templates, secrets management, CI/CD guardrails, IaC policies, and SAST, SCA, secrets, IaC, container, and CSPM tooling.
• Provide hands-on remediation support through code and Terraform reviews, reference implementations, and fixes.
• Coach security champions, provide training and office hours, report metrics, support incident investigations, and feed engineering context into the security program roadmap.

Requirements

• 7–10+ years of experience in product security, application security, cloud security, or a closely related security engineering role, including a strong software engineering foundation.
• Experience across secure code review, threat modeling, secure design, CI/CD and supply chain security, cloud identity and least privilege, IaC security, container and Kubernetes security, and cloud posture management.
• Proficiency reading and writing code in C#/.NET, Go, Java, or Python.
• Hands-on experience with Azure and/or AWS security services and IaC tooling such as Terraform or Bicep.
• Track record of leading threat modeling and architecture reviews at scale and turning results into requirements engineering teams deliver.
• Ability to build trust with VP-level engineering leaders and senior engineers, drive priorities through partnership, and hold the line on risk.
• Comfort with scripting, automation, repeatable security patterns, and AI-assisted tooling.
• Familiarity with securing AI-enabled features and AI coding agents, including risks involving non-human identities, MCP integrations, and AI-system data exposure.

Nice to have

• Prior experience embedded with or partnering directly with engineering teams.
• CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, OSCP, or a similar certification.

Culture & Benefits

• Flexible time off, flextime, autonomous work support, learning and development opportunities, onboarding, and leadership training.
• Recognition programs, including Bonusly and peer-nominated awards.
• Company-paid medical, dental, and vision coverage, including 100% employer-paid options and 90% dependent coverage, plus FSA, HSA, 401(k) match, and telehealth.
• Parental leave and support, fertility, surrogacy, and adoption reimbursement, maternity support, breast milk shipping, pet insurance, legal advisory services, and financial planning tools.
• AI-assisted tools may support recruitment operations, but hiring decisions are made by hiring teams.