Security Engineer, Product Security

Location: Based in San Francisco, California, with U.S. Remote listed as an alternative. Regular San Francisco office presence is expected; candidates in San Francisco or willing to relocate are preferred. Relocation support is available for the right candidate.

Base salary: $165,375–$202,125 USD annually, excluding bonus, equity, and benefits.

Company

hirify.global builds technology for global commerce and logistics, helping companies move merchandise across more than 112 countries.

What you will do

• Define security architecture, secure-by-default patterns, and reference implementations for products and services.
• Lead high-risk product security reviews, domain-specific threat modeling, and attack surface analysis.
• Build and scale the security champions program and product security training across engineering teams.
• Set standards for triaging, reproducing, and prioritizing bug bounty submissions and internal security reports, including systemic remediation.
• Own security services and tooling used by product teams across global infrastructure.
• Mentor security engineers and act as the authoritative technical voice on product security.

Requirements

• Typically 2–5 years of experience in product or application security, or software development with a security focus; demonstrated work is valued over an exact experience count.
• Strong understanding of web application security principles and common attack vectors, including OWASP Top 10.
• Proficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools.
• Working knowledge of at least one modern programming language, such as Ruby, Java/Kotlin, TypeScript/JavaScript, or Python.
• Working knowledge of at least one major cloud provider: AWS, GCP, or Azure.
• Comfort with a security on-call rotation and taking on work across security disciplines when needed.

Nice to have

• Hands-on experience with bug bounty platforms.
• Experience with SAST tools such as Cycode, Semgrep, Snyk, or similar.
• Experience with cloud infrastructure security and container technologies.
• Participation in CTF events or open-source security projects.
• Familiarity with threat modeling frameworks and secure SDLC best practices.
• Interest in contributing to internal developer security training programs.

Culture & Benefits

• Regular in-office collaboration in San Francisco, with coordination across continents through Slack, video, and async documentation.
• Latest hardware and software, including frontier AI models from the first day.
• Agile working practices with the team deciding how to operate.
• Medical, dental, flexible time off, bonus, and equity are included in the total rewards package.
• Equal opportunity employment and candidate data privacy protections under applicable regulations.