Назад
Company hidden
7 дней назад

Security Software Engineer (Cybersecurity)

218 420 - 302 840CAD
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US/Canada
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Software Engineer (Cybersecurity): Improving the security and privacy of Tailscale through software development, feature audits, threat modeling, and security analysis with an accent on application security, API vulnerabilities, cryptographic protocols, and networking. Focus on identifying technical weaknesses, implementing defense-in-depth mitigations, and building secure software for distributed networking products.

Location: Remote in Canada; other listed locations are Canada and the United States

Salary: CAD 218,420–302,840 base salary

Company

hirify.global develops software for securely interconnecting people and devices, helping individuals and organizations protect networks and share access to internal tools. The company is fully distributed and backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.

What you will do

  • Identify and implement security and privacy features, bug fixes, and defense-in-depth improvements across the codebase.
  • Audit product features for technical security weaknesses, identify mitigations, and drive issues toward resolution.
  • Support engineering decisions through threat modeling and security analysis.
  • Collaborate with engineering teams on secure coding practices, targeted security guidance, and training.
  • Spend at least 50% of the role writing software rather than performing purely operational or governance security work.

Requirements

  • Proficiency developing in at least one programming language; hirify.global uses Go.
  • Proficiency developing for at least one application platform, such as iOS, Android, web, Windows, macOS, or Linux.
  • Prior experience in a safety-related technical role, including application security, application platform security, penetration testing, threat modeling and prioritization, user experience design or research, or digital forensics and incident response.
  • Deep understanding of web application vulnerabilities, including the OWASP Top 10, client-side security, and common API security flaws.
  • Knowledge of cryptographic primitives and protocols.
  • Knowledge of common networking protocols.
  • Ability to give and process constructive feedback and work independently and collaboratively.
  • Flexibility in a dynamic startup environment and a risk-based approach to practical, usable security controls.

Culture & Benefits

  • Inclusive, flexible, remote-first environment with flexibility in how and when work is performed.
  • Base salary, equity incentive plan, and comprehensive health, vision, and dental benefits with no waiting period.
  • Paid time off, paid parental leave, employer-funded retirement contributions, and annual company retreats and team off-sites.
  • Professional development support of $1,500 USD annually, plus mentorship, coaching, and internal promotion opportunities.
  • Company-owned laptop, monthly home internet reimbursement, and $500 USD for a home workstation.
  • Remote work supported through virtual and in-person events and a corporate co-working program; some roles may require in-office collaboration when stated in the job description.

Hiring process

  • AI-assisted tools may be used to screen and assess candidates, while all hiring decisions are made by people.
  • Accessibility accommodations are available at any stage of the recruitment process through the recruiter.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →