Product Security Engineer

About the role

YipitData is seeking a Product Security Engineer to integrate security into the development lifecycle of our products and services. You will partner with Engineering and Product teams to assess new technologies, conduct threat modeling, and identify vulnerabilities to ensure secure delivery. This role involves hands-on architecture review, security tool management, and the development of automated security solutions.

Responsibilities

• Conduct threat modeling and security design reviews for new products and features
• Analyze application architecture, APIs, and cloud services to identify potential attack vectors
• Validate vulnerabilities and collaborate with engineers to design effective remediation plans
• Manage and improve security tooling including SAST, DAST, and dependency scanning
• Develop automation to scale security processes alongside engineering growth
• Create security standards, coding guidance, and documentation for engineering teams
• Lead incident response for product security issues and perform root cause analysis

Required skills

• Product Security
• Application Security
• Threat Modeling
• Vulnerability Assessment
• Cloud Security
• CI/CD Pipelines
• Python
• JavaScript
• SAST
• DAST

Nice to have

• AI security
• Identity and Access Management
• Infrastructure-as-Code scanning
• OWASP Top 10
• OWASP ASVS
• NIST

Benefits

• Flexible work hours
• Flexible vacation
• 401K match
• Parental leave
• Team events
• Wellness budget
• Learning reimbursement

About the Company

YipitData is a leading market research and analytics firm for the disruptive economy that analyzes billions of alternative data points to provide actionable insights. The company operates globally with offices in the US, APAC, and India and is recognized for a people-centric culture that emphasizes transparency, ownership, and continuous mastery.