Product Security Engineer — Remote, Impactful Security Design

YipitData; United States; On-site; USD 120,000 - 190,000; Full time

Job summary

YipitData, a leading market research and analytics firm, is hiring a Product Security Engineer to embed security into products and services. You will partner with Engineering and Product teams throughout the lifecycle to model threats, review designs, identify vulnerabilities, and implement practical fixes before production.

This hands-on role emphasizes architecture review, secure design, and tooling improvements, with flexibility for remote work across the US.

Qualifications

• Proactive involvement in product security from early stages.
• Ability to assess architecture, APIs, and data flows for risk.
• Experience identifying and prioritizing vulnerabilities for remediation.

Responsibilities

• Get involved early in new products and features, using threat modeling and security design reviews to find problems before they reach production
• Dig into application architecture, APIs, authentication, authorization, data flows, cloud services, and third‑party integrations to understand how systems could be attacked
• Find and validate vulnerabilities, separate real risk from noise, and help teams prioritize what actually matters
• Work alongside engineers to design remediate plans that protect customers without bringing development to a halt
• Own and improve security tooling across the development lifecycle, including SAST, DAST, dependency scanning, and secret scanning
• Tune security tools and workflows so engineers receive useful findings instead of a flood of false positives
• Build automation that allows Product Security to keep pace as our products, engineering teams, and use of AI continue to grow
• Turn security lessons into clear standards, secure design patterns, coding guidance, and documentation engineers will actually use
• Help lead the response when product security issues arise, from initial investigation and containment through root cause analysis and long‑term remediation
• Become a trusted partner to Engineering

Skills

Threat modeling

Security design reviews

Vulnerability identification

Security tooling

SAST/DAST

Automation

Secure design patterns

Documentation

Cross-team collaboration

Tools

SAST tools

DAST tools

Dependency scanning

Secret scanning

Job description

YipitData, a leading market research and analytics firm, is hiring a Product Security Engineer to embed security into products and services. You will partner with Engineering and Product teams throughout the lifecycle to model threats, review designs, identify vulnerabilities, and implement practical fixes before production.

This hands-on role emphasizes architecture review, secure design, and tooling improvements, with flexibility for remote work across the US.