Product Security Engineer - Remote, Impactful Security Design

YipitData; New York (NY); On-site; USD 153,000 - 207,000; Full time

Benefits offered by this job

Flexible work hours

Flexible vacation

401K match

Parental leave

Wellness budget

Learning reimbursement

Job summary

YipitData is seeking a Product Security Engineer to embed security into our products and services, partnering with Engineering and Product across the lifecycle. You will assess new products, lead threat modeling and design reviews, and drive practical fixes before issues reach production.

This hands-on role requires examining architecture, APIs, authentication, data flows, cloud services, and third‑party integrations to mitigate risks.

Qualifications

• Experience in product security, application security, software engineering, or related roles.
• Ability to threat model, review architecture, and assess applications beyond checklist routines.
• Experience with secure design patterns, coding guidance, and risk prioritization.

Responsibilities

• Get involved early in new products and features, using threat modeling and security design reviews to find problems before they reach production.
• Dig into architecture, APIs, authentication, data flows, cloud services, and third‑party integrations to identify potential attacks.
• Find and validate vulnerabilities, prioritize real risks, and guide remediation with engineering teams.
• Collaborate with engineers to design remediation plans that protect users without impeding development.
• Own and improve security tooling across the development lifecycle, including SAST, DAST, and secret scanning.
• Tune security tooling to deliver actionable findings and reduce false positives.
• Build automation to scale security as products and AI usage grow.
• Turn security lessons into usable standards, design patterns, and developer documentation.

Skills

Threat modeling

Security design reviews

SAST/DAST tooling

CI/CD security

Cloud & containers

Identity & access management

Architecture review

Job description

YipitData is seeking a Product Security Engineer to embed security into our products and services, partnering with Engineering and Product across the lifecycle. You will assess new products, lead threat modeling and design reviews, and drive practical fixes before issues reach production.

This hands-on role requires examining architecture, APIs, authentication, data flows, cloud services, and third‑party integrations to mitigate risks.