Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Нижеразвернуть
$142к-160к/год
$170к$200кмедиана$230к
По похожим ролям (48) ~ $200к/год
На СНГ рынке: $4к/мес ($3.7к - $4.3к)
78
Хорошая вакансия
развернуть
Чёткая зона ответственности в AppSec, практическая инженерная работа и подробные критерии успеха на первый год делают вакансию понятной; привлекательности добавляют продуктовая компания и описанные льготы.
Ниже рынка
Современные технологии
Понятная ответственность
Бюджет на развитие
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Security Engineer - App Sec (AWS/Terraform): Building application security tooling, automation, and code fixes across Kin’s applications and cloud infrastructure with an accent on vulnerability remediation, secure design, and supply chain security. Focus on leading code and architecture reviews, threat modeling, AWS hardening, and proactive remediation of application, code, and AI security risks.
Location: Remote; for U.S. roles, must be able to live and work full-time in one of the listed states; remote technical positions in Canada are limited to Ontario.
Salary: $141,890–$159,650 annually, plus equity.
Company
hirify.global builds technology-enabled homeowners insurance products designed to simplify coverage and support homeowners affected by climate risks and rising costs.
What you will do
Own vulnerability remediation across engineering and drive findings to resolution against remediation SLAs.
Write production code fixes and harden applications, cloud systems, and infrastructure at the source.
Lead secure code reviews, architecture reviews, and threat modeling with engineering teams.
Partner with developers on dependency, software supply chain, and critical third-party vulnerability remediation.
Build tooling and automation for security detection, triage, observability, and remediation.
Monitor application, code, and AI security threats; mentor engineers and promote secure coding practices.
Requirements
5+ years of software engineering or security engineering experience, including at least 1 year focused on security.
Hands-on proficiency in at least one backend programming language and ability to write and ship production code fixes; Ruby is strongly preferred.
Hands-on experience with SAST and DAST tools in CI/CD pipelines and converting findings into fixes.
Experience driving vulnerability remediation at scale, including dependency and software supply chain vulnerabilities, with tools such as GitHub Advanced Security.
Experience performing secure code reviews, architecture reviews, and threat modeling.
Hands-on experience securing AWS environments, including IAM, VPCs, and WAF, and remediating Terraform infrastructure-as-code.
Ability to explain security concepts, risks, and tradeoffs clearly to technical and non-technical audiences.
Culture & Benefits
Remote-first work environment with offices in Chicago and St. Petersburg for collaboration.
Employment benefits include medical, dental, vision, HSA contributions, life insurance, disability coverage, and a 401(k) match of up to 4%.
Flexible PTO for exempt employees, eight company holidays, and paid parental leave.
Professional development budgets for certifications, conferences, and learning, subject to management approval.
Process may include recruiter, hiring manager, and team interviews plus a role-relevant skills assessment.
Recruiters and hiring teams make candidate evaluations and hiring decisions, with updates and feedback provided after interviews.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →