Product Security Engineer — Remote, Build Secure Apps

YipitData; New York (NY); On-site; USD 153,000 - 207,000; Full time

Benefits offered by this job

Flexible hours

401K match

Parental leave

Wellness budget

Learning reimbursement

Job summary

YipitData is seeking a Product Security Engineer to embed security into its products and services, partnering with Engineering and Product teams to assess architectures, perform threat modeling, and drive practical fixes before production.

This is a remote-friendly role with a NYC HQ and US-wide flexibility. You’ll build security tooling, automate workflows, and balance security with delivery speed, while applying coding skills in Python or JavaScript.

Qualifications

• Experience in product security or application security roles.
• Ability to threat model, review architecture, and assess applications.
• Familiarity with APIs, cloud services, containers, and CI/CD pipelines.
• Experience with security tooling and automating security work.

Responsibilities

• Get involved early in new products and features, using threat modeling and security design reviews to find problems before they reach production.
• Dig into architecture, data flows, authentication/authorization, and cloud services to identify attack surfaces.
• Validate vulnerabilities, prioritize risks, and guide remediation with engineering teams.
• Own and improve security tooling across the development lifecycle (SAST/DAST, dependency/secret scanning).
• Build automation to scale security as products and teams grow.

Skills

Threat modeling

Security design reviews

Vulnerability assessment

Python

JavaScript

CI/CD pipelines

SAST

DAST

Dependency scanning

Secret scanning

Communication

Tools

SAST

DAST

Dependency scanning

Secret scanning

IaC scanning

Job description

YipitData is seeking a Product Security Engineer to embed security into its products and services, partnering with Engineering and Product teams to assess architectures, perform threat modeling, and drive practical fixes before production.

This is a remote-friendly role with a NYC HQ and US-wide flexibility. You’ll build security tooling, automate workflows, and balance security with delivery speed, while applying coding skills in Python or JavaScript.