Remote Product Security Engineer — Build Secure, Scalable Apps

Socket.dev; New York (NY); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Flexible work hours

Flexible vacation

Generous 401K match

Parental leave

Job summary

YipitData is seeking a Product Security Engineer to embed security into our products and services. You will partner with Engineering and Product teams across the development lifecycle, leading threat modeling, design reviews, and vulnerability remediation to protect customers.

This is a remote-friendly role that can be based in NYC, one of our office hubs, or anywhere in the US. You will also build automated security tooling and help shape secure standards for the team.

Qualifications

• Experience in product security or application security.
• Ability to threat model, review architecture, and assess applications without relying solely on checklists.
• Strong coding skills in Python or JavaScript.
• Experience with CI/CD pipelines and cloud services.
• Proven ability to balance security with customer impact and business priorities.

Responsibilities

• Get involved early in new products and features to identify security issues.
• Lead threat modeling and security design reviews to prevent production problems.
• Identify and validate vulnerabilities, and help prioritize remediation.
• Design remediation plans with engineers to minimize development disruption.
• Own and improve security tooling across the development lifecycle (SAST/DAST, dependency/secret scanning).
• Build automation to keep pace with product growth, especially AI-enabled features.
• Turn security lessons into practical standards and coding guidance for engineers.
• Lead security incident response from investigation to remediation.
• Collaborate with Engineering and Product to ensure secure design decisions.
• Monitor emerging risks in cloud and AI-enabled products and prepare for new threat techniques.

Skills

Threat modeling

Architecture review

Vulnerability assessment

Security tooling

Python/JavaScript scripting

CI/CD pipelines

Identity & access

OWASP/NIST

AI security

Tools

SAST

DAST

Dependency scanning

Secret scanning

IaC scanning

Job description

YipitData is seeking a Product Security Engineer to embed security into our products and services. You will partner with Engineering and Product teams across the development lifecycle, leading threat modeling, design reviews, and vulnerability remediation to protect customers.

This is a remote-friendly role that can be based in NYC, one of our office hubs, or anywhere in the US. You will also build automated security tooling and help shape secure standards for the team.