Senior Security Software Engineer — Secure-by-Design Infra (Remote)

JoinStartup; San Francisco, New York (CA, NY); Ibrido; USD 139.000 - 239.000; Tempo pieno

Vantaggi offerti da questo lavoro

Healthcare

Unlimited PTO

Paid Family Leave

Self-Care Days

Remote wellbeing resources

Learning opportunities

Hybrid work model

Descrizione del lavoro

Hover is seeking a Senior Security Software Engineer for building foundational security systems that protect users and infrastructure. You will design robust, scalable security services, including authentication, identity management, secret management, and more, as a primary partner for engineering teams.

You will lead threat modeling, secure code reviews, and work to harden production environments with CI/CD security, compliance readiness, and defense-in-depth strategies across cloud

Competenze

• 5+ years of hands-on software engineering experience.
• 3+ years of hands-on security-focused engineering experience.
• Experience building scalable security systems (e.g., secret management, service authorization, data encryption) in a production environment.

Mansioni

• Design and build core security services such as permissions management and secrets orchestration.
• Develop secure-by-default libraries and frameworks for engineering teams.
• Lead threat modeling and secure architecture reviews.
• Hardening cloud infrastructure with network isolation and vulnerability detection.
• Run incident response and support audits.

Conoscenze

Authentication systems

Identity management

Secret management

RBAC

SCIM

Threat modeling

Secure code review

Strumenti

Ruby

TypeScript

Python

Docker

Kubernetes

GCP

Terraform

Descrizione del lavoro

Hover is seeking a Senior Security Software Engineer for building foundational security systems that protect users and infrastructure. You will design robust, scalable security services, including authentication, identity management, secret management, and more, as a primary partner for engineering teams.

You will lead threat modeling, secure code reviews, and work to harden production environments with CI/CD security, compliance readiness, and defense-in-depth strategies across cloud