Security Software Engineer

Hover; San Francisco (CA); Hybrid; USD 148,000 - 183,000; Full time

Benefits offered by this job

Competitive salary

Equity stake

Healthcare coverage

Unlimited PTO

Hybrid work model

Learning & development

Job summary

Hover in San Francisco is seeking a Security Software Engineer to help build and maintain foundational security systems that protect users and infrastructure. You will own scoped features, grow quickly with mentorship, and collaborate on authentication, identity management, and secret management while reinforcing secure-by-design practices across our stack (Ruby, TypeScript, Docker, GCP, Terraform).

Join The Infrastructure and Security team to strengthen our platform, tackle security challenges,

Qualifications

• 1-2+ years of hands-on software engineering experience or equivalent practical experience.
• Bachelor’s degree in CS or related field, or strong technical fundamentals with an interest in security.
• Strong programming fundamentals and proficiency in at least one modern language (Ruby, TypeScript, Python, C++, etc.).
• Basic familiarity with web security concepts, SDLC security integration, and modern development practices.
• Attention to detail, clear communication, and willingness to surface blockers early.
• Excellent collaboration skills for cross-team work.

Responsibilities

• Security Service Development: Collaborate on core security services and secure-by-default libraries/frameworks.
• Security Infrastructure Automation: Enhance CI/CD with automated self-serve security controls like SAST.
• Architecture & Code Review: Support secure reviews and lead threat modeling under mentorship.
• System Hardening: Maintain resilient cloud infrastructure with defense‑in‑depth strategies.
• Compliance & Process: Assist with security incidents and SOC 2 audits.
• Collaboration & Education: Advise teams on security best practices and reduce friction for developers.

Skills

Ruby

TypeScript

Python

C++

Security basics

Debugging

Communication

Education

Bachelor's in CS

Job description

Hover helps people design, improve, and protect the properties they love. With proprietary AI built on over a decade of real property data, Hover answers age-old questions like "What will it look like?" and "What will it cost?" Homeowners, contractors, and insurance professionals rely on Hover to get fully measured, accurate, and interactive 3D models of any property - all from a smartphone scan in minutes.

At Hover, we’re driven by curiosity, purpose, and a shared commitment to serving our customers, communities, and each other. We believe the best ideas come from diverse perspectives and are proud to cultivate an inclusive, high-performance culture that inspires growth, accountability, and excellence. Backed by leading investors like Google Ventures and Menlo Ventures, and trusted by industry leaders including Travelers, State Farm, and Nationwide - we’re redefining how people understand and interact with their spaces.

Why Hover wants you

As a Security Software Engineer, you will help build and maintain foundational security systems that protect our users and infrastructure. You will bring strong technical fundamentals, product thinking, and a collaborative mindset. You’ll take ownership of scoped features, grow quickly with mentorship, and build strong security and full-stack fundamentals. Working closely with senior engineers, you will collaborate on core functions such as authentication (login, MFA), identity management (SCIM, RBAC), and secret management, learning how to design and implement robust, scalable security solutions into our platform.

The Team

The Infrastructure and Security team at Hover ensures the scalability, reliability, and security of our platform, empowering engineers to build and deploy applications faster, safer, and with greater stability. This collaborative team is composed of engineers with expertise in cloud infrastructure, security, automation, and CI/CD best practices. We handle everything from Kubernetes environments and cloud architecture to securing user authentication and automating vulnerability detection.

Our mission is to make the best path the easiest path by providing robust automation, consistent patterns, and secure-by-design principles. We partner with engineering teams to tackle challenges like managing rich geospatial and machine learning workloads, hardening cloud infrastructure, and implementing security features across our stack (Ruby, TypeScript, Docker, GCP, Terraform, and more).

Team members are supported with professional growth opportunities, a strong focus on learning, and a culture that values collaboration, innovation, and the continuous improvement of our systems and security posture. Join us to work on cutting-edge challenges that are critical to the foundation of Hover’s success.

You will contribute by

• Security Service Development: Collaborate on the development of core security services (e.g., permissions management, secrets orchestration, secure MLOps). Help build secure-by-default libraries and frameworks that empower engineering teams to write secure code.
• Security Infrastructure Automation: Assist with enhancing our CI/CD pipeline by integrating automated self-serve security controls (e.g., SAST, supply chain security checks).
• Architecture & Code Review: Support secure code and architecture reviews, assist in enforcing secure-by-design principles, and learn to lead threat modeling under mentorship.
• System Hardening: Contribute to maintaining resilient cloud infrastructure, network isolation, automated vulnerability detection, and defense-in-depth strategies to harden our production environment.
• Compliance & Process: Contribute to security incident response, document security risks, and support compliance audits (e.g., SOC 2).
• Collaboration & Education: Advise teams on security best practices, identify and solve for developer security friction points, and bring security awareness to engineering.

Your background includes

• 1-2+ years of hands-on software engineering experience (or equivalent practical experience).
• Bachelor’s degree in CS or related field, or strong technical fundamentals, with an interest in security.
• Strong programming fundamentals (debugging, writing maintainable code) and proficiency in at least one modern programming language (Ruby, TypeScript, Python, C++, etc.) with comfort learning new stacks.
• Basic familiarity with web security concepts, modern development practices, and integrating security into the SDLC.
• Strong attention to detail, clear communication, and an eagerness to ask clarifying questions and surface blockers early.
• Excellent communication and collaboration skills for cross-team interactions.

Bonus Points

• Experience from internships or collaborative coding projects in a university or professional setting.
• Familiarity with security tools (e.g., SAST scanners, vulnerability detectors) or LLM-assisted coding tools.
• Demonstrated curiosity in security through CTF competitions, open-source contributions, or personal projects.

Benefits

• Compensation - Competitive salary and meaningful equity in a fast-growing company
• Healthcare - Comprehensive medical, dental, and vision coverage for you and dependents
• Paid Time Off - Unlimited and flexible vacation policy
• Paid Family Leave - We support work/life balance and offer generous paid parental and new child bonding leave
• Mandatory Self-Care Days - A day set aside each month to allow employees to recharge
• Remote Wellbeing Resources - We provide recurring fitness classes, meditation/ mindfulness tools, virtual therapy, and family planning assistance
• Learning - We encourage continued education and will help cover the cost of management training, conferences, workshops, or certifications

Hybrid roles at Hover

Hover has Hubs in San Francisco and New York City, where we expect that all employees living within a 50-mile radius of our offices will come into their local Hover office at least three times a week to build rapport and foster organic connection. At this time, Hover is not considering fully remote roles.

The US base salary range for this full-time position is $148,000 - $183,000 annually. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all applicable US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.