H Open role Senior Security Software Engineer HOVER View role →

JoinStartup; San Francisco, New York (CA, NY); Ibrido; USD 139.000 - 239.000; Tempo pieno

Vantaggi offerti da questo lavoro

Healthcare

Unlimited PTO

Paid Family Leave

Self-Care Days

Remote wellbeing resources

Learning opportunities

Hybrid work model

Descrizione del lavoro

Hover is seeking a Senior Security Software Engineer for building foundational security systems that protect users and infrastructure. You will design robust, scalable security services, including authentication, identity management, secret management, and more, as a primary partner for engineering teams.

You will lead threat modeling, secure code reviews, and work to harden production environments with CI/CD security, compliance readiness, and defense-in-depth strategies across cloud

Competenze

• 5+ years of hands-on software engineering experience.
• 3+ years of hands-on security-focused engineering experience.
• Experience building scalable security systems (e.g., secret management, service authorization, data encryption) in a production environment.

Mansioni

• Design and build core security services such as permissions management and secrets orchestration.
• Develop secure-by-default libraries and frameworks for engineering teams.
• Lead threat modeling and secure architecture reviews.
• Hardening cloud infrastructure with network isolation and vulnerability detection.
• Run incident response and support audits.

Conoscenze

Authentication systems

Identity management

Secret management

RBAC

SCIM

Threat modeling

Secure code review

Strumenti

Ruby

TypeScript

Python

Docker

Kubernetes

GCP

Terraform

Descrizione del lavoro

# Senior Security Software Engineer Remote-friendly remote\\_usAT A GLANCESenior Security Software Engineer building foundational security systems, authentication, identity management, and secure infrastructure at a property tech companyLEVELsenior · 5+ yrsKEY SKILLSAuthentication systemsIdentity managementSecret managementRBACSCIMThreat modelingSecure code reviewRubyTypeScriptPythonDockerKubernetesGCPTerraformWHAT YOU'LL DO* Design and build core security services including permissions management, secrets orchestration, and secure MLOps* Develop secure-by-default libraries and frameworks for engineering teams* Enhance CI/CD pipeline with automated security controls (SAST, supply chain security)* Conduct secure code and architecture reviews, enforce secure-by-design principles* Lead threat modeling exercises* Build and maintain resilient cloud infrastructure with network isolation and automated vulnerability detection* Run security incident response and support compliance audits* Advise teams on security best practices and identify developer security friction pointsTHE ROLEHover helps people design, improve, and protect the properties they love. With proprietary AI built on over a decade of real property data, Hover answers age-old questions like “What will it look like?” and “What will it cost?” Homeowners, contractors, and insurance professionals rely on Hover to get fully measured, accurate, and interactive 3D models of any property — all from a smartphone scan in minutes.At Hover, we’re driven by curiosity, purpose, and a shared commitment to serving our customers, communities, and each other. We believe the best ideas come from diverse perspectives and are proud to cultivate an inclusive, high-performance culture that inspires growth, accountability, and excellence. Backed by leading investors like Google Ventures and Menlo Ventures, and trusted by industry leaders including Travelers, State Farm, and Nationwide — we’re redefining how people understand and interact with their spaces.Why Hover wants youAs a Security Software Engineer, you will build foundational security systems that protect our users and infrastructure. You will design and implement robust, scalable security services, acting as a primary partner for engineering teams to build secure-by-design solutions into our platform. You will take ownership of core functions such as authentication (login, MFA), identity management (SCIM, RBAC), secret management, and more. Your work will be crucial in maintaining and hardening compliance (e.g., SOC 2) and protecting sensitive data across our organization.The TeamThe Infrastructure and Security team at Hover ensures the scalability, reliability, and security of our platform, empowering engineers to build and deploy applications faster, safer, and with greater stability. This collaborative team is composed of engineers with expertise in cloud infrastructure, security, automation, and CI/CD best practices. We handle everything from Kubernetes environments and cloud architecture to securing user authentication and automating vulnerability detection.Our mission is to make the best path the easiest path by providing robust automation, consistent patterns, and secure-by-design principles. We partner with engineering teams to tackle challenges like managing rich geospatial and machine learning workloads, hardening cloud infrastructure, and implementing security features across our stack (Ruby, TypeScript, Docker, GCP, Terraform, and more).Team members are supported with professional growth opportunities, a strong focus on learning, and a culture that values collaboration, innovation, and the continuous improvement of our systems and security posture. Join us to work on cutting-edge challenges that are critical to the foundation of Hover’s success.You will contribute by* Security Service Development : Design and build core security services (e.g., permissions management, secrets orchestration, secure MLOps). Develop secure-by-default libraries and frameworks that empower other engineering teams to write secure code.* Security Infrastructure Automation : Enhance our CI/CD pipeline with automated self-serve security controls (e.g. SAST, supply chain security controls)* Architecture & Code Review : Conduct secure code and architecture reviews, enforce secure-by-design principles, and lead threat modeling.* System Hardening : Build and maintain resilient cloud infrastructure. Implement network isolation, automated vulnerability detection, and defense-in-depth strategies to harden our production environment.* Compliance & Process : Run security incident response, document risks, and support audits.* Collaboration & Education : Advise teams on security best practices, identify and solve for developer security friction points, and bring security awareness to engineering.Your background includes* 5+ years of hands-on software engineering experience.* 3+ years of hands-on security-focused engineering experience.* Proficient in at least one programming language (Ruby, TypeScript, Python, C++, etc.) and willingness to ramp up in others.* Experience building scalable security systems (e.g., secret management, service authorization, data encryption) in a production environment.* Experience with threat modeling, security design reviews, or security incident response.* Experience integrating security directly into the software development lifecycle (SDLC).* Meticulous attention to detail; able to be the final checkpoint on security decisions.* Excellent communication and collaboration skills for cross-team interactions.* Ability to mentor and train engineers on secure development processes.* A proactive approach to continuous learning and staying current with emerging security trends.Benefits* Compensation - Competitive salary and meaningful equity in a fast-growing company* Healthcare - Comprehensive medical, dental, and vision coverage for you and dependents* Paid Time Off - Unlimited and flexible vacation policy* Paid Family Leave - We support work/life balance and offer generous paid parental and new child bonding leave* Mandatory Self-Care Days - A day set aside each month to allow employees to recharge* Remote Wellbeing Resources - We provide recurring fitness classes, meditation/ mindfulness tools, virtual therapy, and family planning assistance* Learning - We encourage continued education and will help cover the cost of management training, conferences, workshops, or certificationsHybrid roles at HoverHover has Hubs in San Francisco and New York City, where we expect that all employees living within a 50-mile radius of our offices will come into their local Hover office at least three times a week to build rapport and foster organic connection. We are considering remote candidates for this role.The US base salary range for this full-time position is $139,000 - $239,000 annually. Our salary ranges are determined by role, level, and location. The range displayed