aiinfrastructure as codeci cdincident responseinfrastructure securitythreat modelingapplication securitycloud securitysecurity automation
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$204к-306к/год
$190к$220кмедиана$240к
По похожим ролям (48) ~ $220к/год
На СНГ рынке: $4к/мес ($3.7к - $5.5к)
91
Крутая вакансия
развернуть
Роль четко описана как позиция высокого уровня с межкомандной ответственностью за безопасность в известной продуктовой компании; основной минус - необходимость работать из Нью-Йорка.
Нужен Нью-Йорк
Четкая зона ответственности
Влияние на продукт
Поддержка развития
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Staff Security Engineer (Cloud and Application Security): Shaping and delivering Duolingo’s security strategy by building scalable security services, controls, and automation across applications, cloud infrastructure, and engineering systems with an accent on secure-by-default architecture, threat modeling, and software-development lifecycle security. Focus on leading complex multi-team initiatives, securing AWS and GCP environments, responding to significant incidents, and creating reusable security platforms and infrastructure-as-code patterns.
Location: New York City; must be able to work from or relocate to New York City
Salary: $204,000–$306,000 USD base salary annually, supplemented by equity compensation.
Company
hirify.global develops education products intended to make learning universally available to learners worldwide.
What you will do
Set technical direction for security across applications, cloud infrastructure, and engineering systems.
Lead complex, multi-team security initiatives from problem definition and design through implementation, measurement, and ongoing ownership.
Build scalable security services, controls, and automation for preventing, detecting, and remediating risks.
Partner with engineering teams on threat modeling, architecture and code reviews, risk prioritization, and practical mitigations.
Strengthen software-development lifecycle security, including secrets management, dependency security, vulnerability management, CI/CD controls, and infrastructure as code.
Lead significant incident response, communicate risks and tradeoffs, mentor engineers, and establish secure-by-default patterns.
Requirements
Track record of leading large, complex security engineering initiatives across multiple teams from proposal through production.
Deep experience in at least two areas: application security, product security, cloud security, infrastructure security, detection and response, or security automation.
Strong software-engineering skills in one or more programming or scripting languages, with experience building reliable production systems or internal platforms.
Experience securing cloud environments and designing controls for identity, networking, data protection, secrets, logging, and workload security.
Experience applying threat modeling, architecture review, code review, and vulnerability analysis to real-world systems.
Experience using infrastructure as code and CI/CD to deliver repeatable, testable, and secure configurations.
Sound judgment balancing security risk, engineering effort, product needs, and business priorities.
Clear written and verbal communication skills, including influencing stakeholders with different technical backgrounds.
Ability to work from or relocate to New York City.
Nice to have
Experience building an early-stage security program or technical capability and scaling it across an engineering organization.
Experience securing large multi-account or multi-cloud environments, particularly AWS and GCP.
Experience creating security platforms or paved-road patterns broadly adopted by engineers.
Experience leading high-severity incident response and driving durable improvements afterward.
Experience applying AI-assisted tooling to security analysis, remediation, or control validation.
Culture & Benefits
Work on education products used by a large global learner base.
Collaborate across Engineering, Product, Legal, Finance, and IT.
Access mentorship, learning opportunities, and collaboration with technical specialists.
Base salary is supplemented by equity compensation, with additional employee benefits available.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →