Advanced Product Security Engineer (IoT)

Location: Holtsville, New York, United States; hybrid with a minimum of 3 days per week onsite

Salary: $122,800–$184,200 annual base pay, plus a target performance-based annual cash incentive equal to 12% of base pay.

Company

hirify.global develops smart hardware and software solutions, including thermal printers, barcode scanners, applications, and cloud integrations.

What you will do

• Define and prioritize product security requirements with product management and engineering stakeholders.
• Participate in architecture reviews and threat modeling for software, firmware, hardware, and systems.
• Implement secure software development lifecycle controls and integrate security testing tools into CI/CD pipelines.
• Investigate product security vulnerabilities, lead remediation, and participate in incident response.
• Oversee penetration testing, code reviews, security assessments, and customer security questionnaires and audits.
• Document security architecture, deliver security training, mentor junior engineers, and coordinate with corporate security teams.

Requirements

• Bachelor's degree.
• 8+ years of experience in product security, embedded systems security, or a closely related field.
• Experience securing embedded systems, software, firmware, or IoT products.
• Knowledge of secure-by-design principles, threat modeling, vulnerability management, and security standards.
• Ability to work from the Holtsville, New York office at least 3 days per week.
• Effective verbal and written communication skills.

Nice to have

• Experience with hardware security concepts such as TPM, TrustZone, secure boot, tamper resistance, and cryptography.
• Knowledge of C, C++, Python, or Java.
• CISSP, DevSecOps, cloud security, or related certifications and experience.
• Experience with penetration testing, incident response, disaster recovery, SAMM, or BSIMM.

Culture & Benefits

• Healthcare, wellness programs, inclusion networks, learning and development opportunities, and paid time off.
• Parental leave, employee assistance programs, community service days, and traditional insurance benefits.
• Hybrid work, adaptable hours, Summer Flex Fridays, Focus Fridays, and an annual companywide well-being day.
• Eligibility for annual cash incentive programs and potential long-term incentive equity awards depending on the role.