Get daily remote job opportunities in your inbox

No middlemen, no spam, no infinite scrolling.

Get relevant job opportunities, one email at a time.

Unsubscribe at any time.

Product Security Engineer @Alpaca

[Hiring] Product Security Engineer @Alpaca

Apr 07, 2025 - Alpaca is hiring a remote Product Security Engineer. 💸 Salary: competitive salary & stock options. 📍Location: Worldwide.

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more.

Role Description

We are seeking an experienced Product Security Engineer who can help expand our Security efforts and play a critical role in safeguarding Alpaca’s assets from evolving cyber threats to ensure the security and integrity of our products.

  • Collaborate with Product, Engineering, and DevOps to embed security into our API and platform development lifecycle, working hand-in-hand with our Engineering and Product teams
  • Perform threat modeling and security reviews to spot risks early and keep our products secure
  • Identify, triage, and remediate security vulnerabilities in our codebase, infrastructure, and third-party dependencies, and help respond and manage our bug bounty program
  • Build and tweak automation tools for security testing and monitoring
  • Participate in security incident response efforts, including investigation, containment, and post-mortem analysis, to ensure rapid resolution and continuous improvement
  • Harden our cloud systems (Google Cloud, Kubernetes) and products to meet industry standards and protect against evolving threats
  • Team up with product and DevOps crews to make security seamless without slowing us down
  • Promote a security-first mindset by providing guidance, training, and documentation to team members on secure coding practices and emerging threats
  • Assist with compliance audits and assessments as necessary
  • Conduct security research and contribute to the development of new security tools and techniques

Qualifications

  • Excited about Alpaca’s mission and what we’re building
  • 6-8 years of mixed experience in security operations, security engineering, product security, and DevSecOps
  • Proficiency in at least one programming language (e.g., Go, Python etc.) and the ability to review and write secure code
  • Experience with API security (e.g., OAuth, JWT, WAF, rate limiting)
  • Experience with cloud security (e.g., Google Cloud, AWS) including DevSecOps and embedding security in the CI/CD pipeline
  • A strong understanding of how to secure containerized environments (e.g., Kubernetes, Docker)
  • Familiarity with security tools such as static code analyzers, vulnerability scanners, and penetration testing frameworks
  • Knowledge of common security vulnerabilities (e.g., OWASP Top 10) and mitigation strategies
  • Strong analytical and problem-solving skills
  • Excellent communication skills and committed to work collaboratively across the Firm
  • Comfortable thriving in a distributed, remote-first team with asynchronous collaboration across time zones
  • A curious mindset, empathy for our users and teams, and a commitment to accountability—aligned with Alpaca’s core values of "Stay Curious," "Have Empathy," and "Be Accountable."
  • Available for on-call rotations and after hour responses as needed

Requirements

  • Bachelor’s degree in Information Technology or a related field (Nice-to-Have)
  • Security related certifications such as CISSP, GIAC, OSCP, CRTO, K8s is a plus (Nice-to-Have)
  • Experience in securing and monitoring APIs (Nice-to-Have)
  • Understanding of financial and privacy regulations (Nice-to-Have)
  • Experience in the financial services industry (Nice-to-Have)
  • Business acumen to be able to balance tradeoffs between stakeholders and technology feasibility and budget constraints (Nice-to-Have)

Benefits

  • Competitive Salary & Stock Options
  • Benefits: Health benefits start on day 1. In the US this includes Medical, Dental, Vision. In Canada, this includes supplemental health care. In Japan, you are offered local benefits. Internationally, this includes a stipend value to offset medical costs.
  • New Hire Home-Office Setup: One-time USD $500
  • Monthly Stipend: USD $150 per month via a Brex Card
  • Work with awesome hard working people, super smart and cool clients and innovative partners from around the world

Similar Remote Jobs

More jobs at Alpaca

More Software Development jobs

More jobs in Worldwide

Before You Apply
📍 Be aware of the location restriction for this remote position: Worldwide
Beware of scams! When applying for jobs, you should NEVER have to pay anything. Learn more.
Product Security Engineer @Alpaca
Software Development
Salary 💸 competitive salary & stock options
Remote Location
Worldwide
Job Type unspecified
Posted Apr 07, 2025
Apply for this position Unlock 54,612 Remote Jobs
📍 Be aware of the location restriction for this remote position: Worldwide
Beware of scams! When applying for jobs, you should NEVER have to pay anything. Learn more.
Product Security Engineer Apply for this position Unlock 54,612 Remote Jobs
×
  • Unlock 54,612 hidden remote jobs.
  • Your shortcut to remote work. Apply before everyone else.
  • Click and apply. No middlemen, no hassle.

We’re not like the other sites. Come see why!

50% off in April 2025
  • Single payment
  • Lifetime access
  • Filter by location/skills/salary…
  • Create custom email alerts
  • Private Slack Community