Security Engineer - Secure-by-Design Cloud Platform

Hover; New York (NY); Hybrid; USD 148,000 - 183,000; Full time

Benefits offered by this job

Competitive salary & equity

Healthcare coverage

Unlimited PTO

Family leave

Self-care days

Wellbeing resources

Learning & development

Job summary

Hover in New York City is seeking a Security Software Engineer to help build and maintain foundational security systems—auth, identity management, and secret management—within a fast-growing platform.

You will join the Infrastructure and Security team to harden cloud infrastructure, implement secure-by-design principles, and automate vulnerability detection using Ruby, TypeScript, Docker, GCP, Terraform, and more. This role blends hands-on engineering with security-focused collaboration.

Qualifications

• 1–2+ years of hands-on software engineering experience.
• Bachelor’s degree in CS or related field, or strong technical fundamentals with an interest in security.
• Proficiency in at least one modern language (Ruby, TypeScript, Python, C++).
• Basic familiarity with web security concepts and secure SDLC practices.
• Excellent communication and collaboration skills for cross-team work.

Responsibilities

• Security Service Development: contribute to core security services and secure-by-default libraries.
• Security Infrastructure Automation: enhance CI/CD with automated security checks.
• Architecture & Code Review: support secure reviews and threat modeling under mentorship.
• System Hardening: maintain resilient cloud infra and automated vulnerability detection.
• Compliance & Process: assist with security incidents and SOC 2 audits.
• Collaboration & Education: advise teams on security best practices.

Skills

Software engineering

Programming languages

Security concepts

Communication skills

Education

Bachelor's degree in CS or related field

Tools

Ruby

TypeScript

Python

C++

SAST scanners

CI/CD tools

Job description

Hover in New York City is seeking a Security Software Engineer to help build and maintain foundational security systems—auth, identity management, and secret management—within a fast-growing platform.

You will join the Infrastructure and Security team to harden cloud infrastructure, implement secure-by-design principles, and automate vulnerability detection using Ruby, TypeScript, Docker, GCP, Terraform, and more. This role blends hands-on engineering with security-focused collaboration.