Senior Security Software Engineer

hover; United States; Hybrid; USD 139,000 - 239,000; Full time

Benefits offered by this job

Remote-friendly

Equity offered

Unlimited vacation

Paid family leave

Self-care day

Wellbeing resources

Job summary

hover is seeking a security engineer to develop foundational security software and systems that protect users, data, and cloud infrastructure. You will partner with engineering teams to make secure development the default, owning identity and access controls, secrets, CI/CD security, production hardening, and compliance support.

You will build security services and reusable components, add automated checks to CI/CD, perform threat modeling, and harden cloud environments.

Qualifications

• At least 5 years of hands-on software engineering, with 3+ years in security engineering.
• Proficiency in at least one language (Ruby, TypeScript, Python, or C++).
• Experience building scalable security systems (secrets management, encryption).
• Experience with threat modeling, security design reviews or incident response.
• Experience integrating security into the software development lifecycle.

Responsibilities

• Build security services and reusable components for permissions, secrets, and secure ML operations.
• Add automated security checks and supply-chain controls to CI/CD workflows.
• Review designs, lead threat modeling, and promote secure-by-design practices.
• Harden cloud environments with network isolation, vulnerability detection, and layered defenses.
• Support security incident response, risk documentation, and compliance audits.
• Advise and mentor engineering teams on secure development and reduce friction.

Skills

Security engineering

Programming

Threat modeling

Incident response

Mentoring

Tools

Secrets management

Data encryption

CI/CD security

Job description

Role overview

Develop foundational security software and systems that protect users, data, and cloud infrastructure. You will partner with engineering teams to make secure development the default, with ownership spanning identity and access controls, secrets, CI/CD security, production hardening, and compliance support.

Responsibilities

• Build security services and reusable components for permissions, secrets, and secure machine learning operations.


• Add automated security checks and supply-chain controls to CI/CD workflows.


• Review software and system designs, lead threat modeling, and promote secure‑by‑design practices.


• Harden cloud environments with network isolation, vulnerability detection, and layered defenses.


• Support security incident response, risk documentation, and compliance audits.


• Advise and mentor engineering teams on secure development and reduce security‑related workflow friction.

Requirements

• At least 5 years of hands‑on software engineering experience, including 3 or more years focused on security engineering.


• Proficiency in at least one programming language, such as Ruby, TypeScript, Python, or C++, and willingness to learn others.


• Production experience building scalable security systems, such as secrets management, service authorization, or data encryption.


• Experience with threat modeling, security design reviews, or incident response.


• Experience integrating security practices into the software development lifecycle.


• Strong attention to detail, communication, collaboration, and ability to mentor engineers.

Benefits and work setup

• Remote candidates are considered. Employees living within 50 miles of the San Francisco or New York City hubs are expected to work from the local office at least three days per week.


• Stated US base salary range: $139,000–$239,000 annually, with pay depending on location and qualifications; equity is also offered.


• Medical, dental, and vision coverage, flexible unlimited vacation, paid family leave, and a monthly self‑care day.


• Wellbeing resources and support for learning, training, conferences, workshops, or certifications.