The role, as published
About the company
Our client is a software company.
The role
Raydar is recruiting for this role on behalf of our client. This is a hands-on senior engineering role centered on product and platform security. You will write production code, assess designs and implementations, and build tooling that stops entire families of flaws early. Day to day, the focus is on designing safe systems, anticipating attacks and improving developer tools, not on compliance paperwork or IT administration.
What you'll do
- Build shared libraries, templates and guardrails so engineers default to secure patterns.
- Review designs, architecture and production code for authentication, authorization and data exposure issues.
- Run threat models for new features, services and integrations.
- Strengthen security patterns across the stack, including secrets handling, logging and auditability.
- Add developer-facing security checks to CI/CD and local workflows, favoring low-noise results.
- Work alongside engineers to fix vulnerabilities with durable, reusable solutions.
- Help shape a lightweight secure development lifecycle suited to a fast-moving team.
- Contribute to incident reviews and postmortems when security issues arise.
- Produce guides, examples and design write-ups that help teams build safely without extra overhead.
What we're looking for
- Prior work at a software or technology company with a strong security posture.
- Working knowledge of TypeScript and Node.js, enough to contribute substantive code to an existing application.
- A builder mindset, with the ability to ship production code when needed rather than primarily scripting.
- Able to explain risks and operational procedures clearly in writing.
Bonus points
- Deep AWS security experience, such as identity and access management, network isolation, threat detection and key management.
- Terraform or Pulumi proficiency, with an understanding of the security implications of infrastructure code.
- A background that moved from software engineering into security.
- Hands-on SOC 2 experience, such as designing controls or managing audits.
- Security research activity, such as bug bounty work or published vulnerability write-ups.
Location and work model
- Remote (US)
- Full-time
Compensation, as the posting describes it
- Salary: $150K - $350K
- Equity