Remote Product Security Engineer: Threat Modeling

YipitData; United States; Remote; USD 162,000 - 198,000; Full time

Benefits offered by this job

401K match

Parental leave

Flexible vacation

Learning reimbursement

Job summary

YipitData is seeking a Product Security Engineer to embed security into the full product lifecycle. You’ll partner with Engineering and Product teams to assess new products, perform threat modeling, review designs, and implement fixes before production.

Strong coding and automation skills in a fast-paced, remote-friendly US environment are essential. You will build and improve tooling (SAST/DAST/dep scans), drive secure design patterns, and lead incident response when needed.

Qualifications

• Experience in product security or application security.
• Ability to threat model, review architecture, and assess applications without relying on a checklist.
• Proven experience with security tooling across the development lifecycle.

Responsibilities

• Involve early in new products using threat modeling and security design reviews to find problems before they reach production.
• Analyze architecture, APIs, authentication, authorization, data flows, cloud services, and third‑party integrations to identify risks.
• Find and validate vulnerabilities, prioritize real risks, and guide remediation with engineers.
• Own and improve security tooling across the development lifecycle, including SAST, DAST, dependency scanning, and secret scanning.
• Build automation to keep pace as products and AI usage grow.
• Lead response when product security issues arise, from investigation to remediation.
• Collaborate with Engineering and Product to bring strong security judgment to decisions.

Skills

Product security

Application security

Software engineering

Threat modeling

CI/CD pipelines

Python

JavaScript

Tools

SAST

DAST

Dependency scanning

Secret scanning

IaC scanning

Job description

YipitData is seeking a Product Security Engineer to embed security into the full product lifecycle. You’ll partner with Engineering and Product teams to assess new products, perform threat modeling, review designs, and implement fixes before production.

Strong coding and automation skills in a fast-paced, remote-friendly US environment are essential. You will build and improve tooling (SAST/DAST/dep scans), drive secure design patterns, and lead incident response when needed.