Software Engineer (Security)

TL;DR

Software Engineer (Security): Building and scaling patching infrastructure to deliver secure, vetted packages to developers worldwide with an accent on supply chain security and vulnerability management. Focus on designing scalable patch generation systems, automating vulnerability detection workflows, and improving the security of the JavaScript ecosystem.

Location: Must be based in the United States

Company

hirify.global helps developers and security teams ship faster by providing tools to safely find, audit, and manage open source code.

What you will do

• Lead patching efforts for high-impact vulnerabilities across npm packages.
• Build and improve automated patching infrastructure and tooling.
• Design and implement scalable patch generation and delivery systems.
• Develop automated vulnerability detection and patch creation workflows.
• Build APIs and integrations to deliver certified packages.
• Collaborate with security researchers to understand and patch critical vulnerabilities.

Requirements

• 3+ years of software engineering experience with production systems.
• Strong proficiency in Node.js, JavaScript, and TypeScript.
• Experience with package managers like npm, yarn, and pnpm.
• Understanding of software security concepts and vulnerability management.
• Experience building and scaling APIs and data processing pipelines.
• Familiarity with automated testing, CI/CD, and deployment systems.

Nice to have

• Experience with security tooling or patch management.
• Knowledge of software supply chain security challenges.
• Experience with other package ecosystems like Python, Go, or Rust.
• Open source contributions or package maintenance experience.
• Background in DevSecOps or security engineering.

Culture & Benefits

• Market competitive salary bands and meaningful equity program.
• Comprehensive health benefits for you and your family with 99% coverage.
• Flexible time-off, holidays, and winter shutdown.
• Paid parental leave.
• Remote-first environment with quarterly team off-sites.

Hiring process

• Informational interview with Talent Team and Hiring Manager interview.
• Take-home problem followed by internal and live reviews.
• Final interview with the founder and reference checks.