Назад
Company hidden
2 часа назад

Senior Product Security Engineer (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Bulgaria
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/

TL;DR

Senior Product Security Engineer (Cybersecurity): Securing hirify.global products by embedding security into the development lifecycle with an accent on vulnerability management, automation, and AI-driven tooling. Focus on identifying and remediating vulnerabilities, integrating security into CI/CD pipelines, and collaborating with engineering teams to improve overall security posture.

Location: Must be based in Bulgaria (Hybrid work model).

Company

hirify.global provides the world's fastest and simplest data platform, powering high-performance applications for over 10,000 customers globally.

What you will do

  • Own and operate vulnerability management processes from discovery through remediation and reporting.
  • Implement and manage AI-based security scanning tools to improve coverage and signal quality.
  • Conduct product security assessments using traditional and AI-assisted techniques like SAST, DAST, and LLM-assisted review.
  • Partner with engineering teams to triage findings and drive secure development practices.
  • Integrate security tools and workflows into CI/CD pipelines for automated testing.
  • Manage bug bounty platform findings and build automation to reduce manual tracking efforts.

Requirements

  • 6+ years of experience in application or product security.
  • Strong experience operating vulnerability management programs and using Jira for issue tracking.
  • Practical experience with security tools like SAST, DAST, and dependency scanning.
  • Experience building automation via scripting, APIs, or pipelines.
  • Understanding of common application vulnerabilities and secure coding practices.
  • Familiarity with cloud-native environments including Kubernetes and microservices.

Nice to have

  • Experience with AI/ML-driven security workflows or LLM-assisted code review.
  • Experience working with bug bounty platforms such as HackerOne or Bugcrowd.

Culture & Benefits

  • 25 days of vacation time.
  • Hybrid working options from home and the office.
  • Monthly home internet and phone allowance.
  • Comprehensive health, dental, and life insurance including Critical Illness Cover.
  • Lunch and snacks provided in the office.
  • Multisport/CoolFit card for fitness.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →