Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
218к-303к CAD/год
210к CAD260к CADмедиана310к CAD
По похожим ролям (47) ~ 260к CAD/год
На СНГ рынке: $4к/мес ($3.7к - $8.2к)
90
Крутая вакансия
развернуть
Чётко очерченная роль в продуктовой безопасности сочетает разработку с моделированием угроз в профильной продуктовой компании; привлекательности добавляют remote-first формат и явно описанная поддержка развития.
Современный стек
Понятные задачи
Продукт в кибербезопасности
Поддержка развития
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Security Software Engineer (Cybersecurity): Improving the security and privacy of Tailscale through software development, feature audits, threat modeling, and security analysis with an accent on application security, API vulnerabilities, cryptographic protocols, and networking. Focus on identifying technical weaknesses, implementing defense-in-depth mitigations, and building secure software for distributed networking products.
Location: Remote in Canada; other listed locations are Canada and the United States
Salary: CAD 218,420–302,840 base salary
Company
hirify.global develops software for securely interconnecting people and devices, helping individuals and organizations protect networks and share access to internal tools. The company is fully distributed and backed by Accel, CRV, Insight, Heavybit, and Uncork Capital.
What you will do
Identify and implement security and privacy features, bug fixes, and defense-in-depth improvements across the codebase.
Audit product features for technical security weaknesses, identify mitigations, and drive issues toward resolution.
Support engineering decisions through threat modeling and security analysis.
Collaborate with engineering teams on secure coding practices, targeted security guidance, and training.
Spend at least 50% of the role writing software rather than performing purely operational or governance security work.
Requirements
Proficiency developing in at least one programming language; hirify.global uses Go.
Proficiency developing for at least one application platform, such as iOS, Android, web, Windows, macOS, or Linux.
Prior experience in a safety-related technical role, including application security, application platform security, penetration testing, threat modeling and prioritization, user experience design or research, or digital forensics and incident response.
Deep understanding of web application vulnerabilities, including the OWASP Top 10, client-side security, and common API security flaws.
Knowledge of cryptographic primitives and protocols.
Knowledge of common networking protocols.
Ability to give and process constructive feedback and work independently and collaboratively.
Flexibility in a dynamic startup environment and a risk-based approach to practical, usable security controls.
Culture & Benefits
Inclusive, flexible, remote-first environment with flexibility in how and when work is performed.
Base salary, equity incentive plan, and comprehensive health, vision, and dental benefits with no waiting period.
Paid time off, paid parental leave, employer-funded retirement contributions, and annual company retreats and team off-sites.
Professional development support of $1,500 USD annually, plus mentorship, coaching, and internal promotion opportunities.
Company-owned laptop, monthly home internet reimbursement, and $500 USD for a home workstation.
Remote work supported through virtual and in-person events and a corporate co-working program; some roles may require in-office collaboration when stated in the job description.
Hiring process
AI-assisted tools may be used to screen and assess candidates, while all hiring decisions are made by people.
Accessibility accommodations are available at any stage of the recruitment process through the recruiter.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →