Назад
Company hidden
5 дней назад

Senior Security Engineer - App Sec

141 890 - 159 650$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US/Canada
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Engineer - App Sec (AWS/Terraform): Building application security tooling, automation, and code fixes across Kin’s applications and cloud infrastructure with an accent on vulnerability remediation, secure design, and supply chain security. Focus on leading code and architecture reviews, threat modeling, AWS hardening, and proactive remediation of application, code, and AI security risks.

Location: Remote; for U.S. roles, must be able to live and work full-time in one of the listed states; remote technical positions in Canada are limited to Ontario.

Salary: $141,890–$159,650 annually, plus equity.

Company

hirify.global builds technology-enabled homeowners insurance products designed to simplify coverage and support homeowners affected by climate risks and rising costs.

What you will do

  • Own vulnerability remediation across engineering and drive findings to resolution against remediation SLAs.
  • Write production code fixes and harden applications, cloud systems, and infrastructure at the source.
  • Lead secure code reviews, architecture reviews, and threat modeling with engineering teams.
  • Partner with developers on dependency, software supply chain, and critical third-party vulnerability remediation.
  • Build tooling and automation for security detection, triage, observability, and remediation.
  • Monitor application, code, and AI security threats; mentor engineers and promote secure coding practices.

Requirements

  • 5+ years of software engineering or security engineering experience, including at least 1 year focused on security.
  • Hands-on proficiency in at least one backend programming language and ability to write and ship production code fixes; Ruby is strongly preferred.
  • Hands-on experience with SAST and DAST tools in CI/CD pipelines and converting findings into fixes.
  • Experience driving vulnerability remediation at scale, including dependency and software supply chain vulnerabilities, with tools such as GitHub Advanced Security.
  • Experience performing secure code reviews, architecture reviews, and threat modeling.
  • Hands-on experience securing AWS environments, including IAM, VPCs, and WAF, and remediating Terraform infrastructure-as-code.
  • Ability to explain security concepts, risks, and tradeoffs clearly to technical and non-technical audiences.

Culture & Benefits

  • Remote-first work environment with offices in Chicago and St. Petersburg for collaboration.
  • Employment benefits include medical, dental, vision, HSA contributions, life insurance, disability coverage, and a 401(k) match of up to 4%.
  • Flexible PTO for exempt employees, eight company holidays, and paid parental leave.
  • Professional development budgets for certifications, conferences, and learning, subject to management approval.
  • Culture emphasizes ownership, respectful collaboration, curiosity, lean delivery, and data-informed improvement.

Hiring process

  • Applications are accepted until 11/30/2026.
  • Process may include recruiter, hiring manager, and team interviews plus a role-relevant skills assessment.
  • Recruiters and hiring teams make candidate evaluations and hiring decisions, with updates and feedback provided after interviews.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →