[Hiring] Product Security Engineer @YipitData (Alternative)

Role Description

YipitData is looking for a Product Security Engineer to help build security into the products and services we deliver to customers.

In this role, you will:

• Partner closely with Engineering and Product teams throughout the development lifecycle.
• Assess new products and technologies.
• Lead threat modeling and security design reviews.
• Identify vulnerabilities and help teams implement practical fixes before issues reach production.

This is a hands-on role for someone who understands how modern applications are designed and built. You should be comfortable:

• Reviewing system architecture.
• Analyzing vulnerabilities.
• Working directly with engineers.
• Improving the security tools embedded in our development pipelines.

This is a remote-friendly opportunity that can sit in NYC, one of our office hubs, or anywhere else in the US. However, depending upon where the remote work is performed, income could be subject to New York State tax withholding. The work hours are flexible on this team, but most employees work East Coast hours.

Qualifications

• You have worked in product security, application security, software engineering, penetration testing, or another role that taught you how applications are built and broken.
• You can look at a complex system, follow the data, identify trust boundaries, and quickly understand where the real risks may be hiding.
• You know how to threat model, review architecture, and assess applications without relying entirely on a checklist.
• You can validate a vulnerability, determine whether it is actually exploitable, and explain why it matters to both engineers and business leaders.
• You are comfortable working across APIs, cloud services, containers, serverless technologies, and CI/CD pipelines.
• You have worked with tools such as SAST, DAST, dependency scanning, secret scanning, or infrastructure-as-code scanning.
• You can read and write code and are excited to automate repetitive security work using Python, JavaScript, or a similar language.
• You bring strong judgment and can balance security, customer impact, engineering effort, and business priorities.
• You communicate clearly, ask thoughtful questions, and can build credibility with both technical and non-technical teams.
• You have secured AI-enabled products, agents, large language model applications, or MCP integrations.
• You have deep experience with identity, authentication, authorization, or multi-tenant application security.
• You have applied frameworks such as the OWASP Top 10, OWASP MCP Top 10, OWASP ASVS, or NIST in real-world environments.
• You enjoy working across multiple products and engineering teams in an environment where priorities move quickly.

Requirements

• Get involved early in new products and features, using threat modeling and security design reviews to find problems before they reach production.
• Dig into application architecture, APIs, authentication, authorization, data flows, cloud services, and third-party integrations to understand how systems could be attacked.
• Find and validate vulnerabilities, separate real risk from noise, and help teams prioritize what actually matters.
• Work alongside engineers to design remediation plans that protect customers without bringing development to a halt.
• Own and improve security tooling across the development lifecycle, including SAST, DAST, dependency scanning, and secret scanning.
• Tune security tools and workflows so engineers receive useful findings instead of a flood of false positives.
• Build automation that allows Product Security to keep pace as our products, engineering teams, and use of AI continue to grow.
• Turn security lessons into clear standards, secure design patterns, coding guidance, and documentation engineers will actually use.
• Help lead the response when product security issues arise, from initial investigation and containment through root cause analysis and long-term remediation.
• Become a trusted partner to Engineering and Product by bringing strong security judgment and workable solutions to difficult decisions.
• Explore emerging risks across cloud and AI-enabled products and help YipitData prepare for attack techniques that do not yet have a standard playbook.

Benefits

• Flexible work hours and flexible vacation.
• A generous 401K match.
• Parental leave.
• Team events.
• Wellness budget.
• Learning reimbursement.
• Competitive salary with an annual base salary range of $180,000 / year.