Product Security Principal

Location: New York, NY 10018; onsite, full time

Salary: $159,075.00–$242,112.00 per year

Company

hirify.global is a banking and financial services organization.

What you will do

• Serve as the embedded security subject matter expert and thought leader for assigned product lines.
• Define application security requirements, threat models, security architecture, authentication and authorization designs, and data-handling standards.
• Lead vulnerability assessments, penetration testing coordination, secure code reviews, and security validation activities.
• Prepare security assessments, release validation materials, and incident response plans for Technology Review Boards.
• Monitor Key Risk Indicators, manage emerging security issues, identify root causes, and drive remediation.
• Partner with engineering, SRE, business architecture, audit, regulatory, and third-party oversight teams on technology risk.

Requirements

• 8+ years of experience in information security, cybersecurity, or technology risk management within a regulated organization.
• Experience with the Three Lines of Defense model and translating policy and regulatory requirements into control designs for engineers and architects.
• Expert knowledge of application security, threat modeling, and secure software development lifecycle practices.
• Strong understanding of cloud security architecture, IAM, secrets management, data protection, vulnerability assessment, penetration testing, and secure code review.
• Experience with DevSecOps tooling, CI/CD security integration, code scanning, and container security at build and runtime.
• Ability to communicate complex security concepts clearly, influence stakeholders without direct authority, and present recommendations to review boards and executive leadership.

Nice to have

• Undergraduate degree or equivalent.
• Public cloud experience with Azure or AWS, including hardening, resiliency, data protection, and access management.
• Experience with APIs, microservices, SSDLC, financial services, or comparable regulated industries.
• CISSP, CISM, or an equivalent security certification.

Culture & Benefits

• Medical, dental, vision, life, and disability insurance.
• Comprehensive leave program.
• Minimal travel required.
• Work involves collaboration across product, technology, cybersecurity, and business teams.