Назад
Company hidden
5 дней назад

Staff Security Engineer

204 000 - 306 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Релокация
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Staff Security Engineer (Cloud and Application Security): Shaping and delivering Duolingo’s security strategy by building scalable security services, controls, and automation across applications, cloud infrastructure, and engineering systems with an accent on secure-by-default architecture, threat modeling, and software-development lifecycle security. Focus on leading complex multi-team initiatives, securing AWS and GCP environments, responding to significant incidents, and creating reusable security platforms and infrastructure-as-code patterns.

Location: New York City; must be able to work from or relocate to New York City

Salary: $204,000–$306,000 USD base salary annually, supplemented by equity compensation.

Company

hirify.global develops education products intended to make learning universally available to learners worldwide.

What you will do

  • Set technical direction for security across applications, cloud infrastructure, and engineering systems.
  • Lead complex, multi-team security initiatives from problem definition and design through implementation, measurement, and ongoing ownership.
  • Build scalable security services, controls, and automation for preventing, detecting, and remediating risks.
  • Partner with engineering teams on threat modeling, architecture and code reviews, risk prioritization, and practical mitigations.
  • Strengthen software-development lifecycle security, including secrets management, dependency security, vulnerability management, CI/CD controls, and infrastructure as code.
  • Lead significant incident response, communicate risks and tradeoffs, mentor engineers, and establish secure-by-default patterns.

Requirements

  • Track record of leading large, complex security engineering initiatives across multiple teams from proposal through production.
  • Deep experience in at least two areas: application security, product security, cloud security, infrastructure security, detection and response, or security automation.
  • Strong software-engineering skills in one or more programming or scripting languages, with experience building reliable production systems or internal platforms.
  • Experience securing cloud environments and designing controls for identity, networking, data protection, secrets, logging, and workload security.
  • Experience applying threat modeling, architecture review, code review, and vulnerability analysis to real-world systems.
  • Experience using infrastructure as code and CI/CD to deliver repeatable, testable, and secure configurations.
  • Sound judgment balancing security risk, engineering effort, product needs, and business priorities.
  • Clear written and verbal communication skills, including influencing stakeholders with different technical backgrounds.
  • Ability to work from or relocate to New York City.

Nice to have

  • Experience building an early-stage security program or technical capability and scaling it across an engineering organization.
  • Experience securing large multi-account or multi-cloud environments, particularly AWS and GCP.
  • Experience creating security platforms or paved-road patterns broadly adopted by engineers.
  • Experience leading high-severity incident response and driving durable improvements afterward.
  • Experience applying AI-assisted tooling to security analysis, remediation, or control validation.

Culture & Benefits

  • Work on education products used by a large global learner base.
  • Collaborate across Engineering, Product, Legal, Finance, and IT.
  • Access mentorship, learning opportunities, and collaboration with technical specialists.
  • Base salary is supplemented by equity compensation, with additional employee benefits available.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →