Security Engineer – Platform & AI Security (NYC)

SideShift; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

SideShift is building the operating system for the creator economy. We connect brands with creators and secure their data, accounts, and payments. We seek a Security Engineer to own security end-to-end, write code, and build guardrails for a fast-moving AI-driven team.

You will protect web apps, APIs, and iOS, model threats with engineers, and improve identity, access, and secrets management in a cloud-native stack. This is a hands-on, in-person NYC role.

Qualifications

• Shipped production code with a strong security focus.
• Proficiency in TypeScript and PostgreSQL.
• Deep knowledge of web application security, including OAuth and OWASP Top 10.

Responsibilities

• Own application security across our web app, APIs, and iOS app.
• Threat-model new features with engineers before they ship and review security-sensitive code.
• Strengthen identity and access: authentication, authorization, session handling, and account protection.
• Own secrets management and credential rotation across our infrastructure and third-party integrations.
• Protect payment and payout flows from fraud and abuse.
• Own our cloud security posture, including IAM, network controls, and audit logging.
• Build detection and alerting, and lead incident response: containment, investigation, and write-ups.
• Run penetration tests and our vulnerability disclosure program, and fix findings.
• Add security checks to CI and AI-agent workflows to make safe patterns default.
• Help customers trust us: security reviews and questionnaires, and groundwork for compliance.

Skills

Security engineering

Application security

TypeScript

PostgreSQL

OAuth

OWASP Top 10

Cloud security

Incident response

AI/automation

Tools

GCP

CI/CD

Penetration testing

Job description

SideShift is building the operating system for the creator economy. We connect brands with creators and secure their data, accounts, and payments. We seek a Security Engineer to own security end-to-end, write code, and build guardrails for a fast-moving AI-driven team.

You will protect web apps, APIs, and iOS, model threats with engineers, and improve identity, access, and secrets management in a cloud-native stack. This is a hands-on, in-person NYC role.