Product Security Engineer

YipitData is seeking a Product Security Engineer to integrate security into its products and services. The successful candidate will collaborate with Engineering and Product teams throughout the development lifecycle, assessing new products and technologies, leading threat modeling and security design reviews, identifying vulnerabilities, and implementing practical fixes.

Responsibilities:

• Participate early in new product and feature development, applying threat modeling and security design reviews to identify potential issues
• Analyze application architecture, APIs, authentication, authorization, data flows, cloud services, and third-party integrations to understand potential attack vectors
• Identify and validate vulnerabilities, prioritize risks, and work with teams to design remediation plans
• Improve security tooling across the development lifecycle, including SAST, DAST, dependency scanning, and secret scanning
• Automate security tasks and develop standards, secure design patterns, and coding guidance
• Lead responses to product security incidents and collaborate with Engineering and Product teams

Requirements:

• Experience in product security, application security, software engineering, penetration testing, or related roles
• Ability to analyze complex systems, identify trust boundaries, and understand potential risks
• Knowledge of threat modeling, architecture review, and application assessment
• Familiarity with security tools such as SAST, DAST, dependency scanning, and secret scanning
• Programming skills in languages like Python, JavaScript, or similar
• Strong judgment and communication skills, balancing security, customer impact, engineering effort, and business priorities

Benefits:

• Competitive salary ($180,000/year)
• Comprehensive benefits package
• Flexible work hours and vacation policy
• Generous 401K match and parental leave
• Team events, wellness budget, and learning reimbursement