Senior Software Engineer – Application & Cloud Security (Remote)

• Protect intellectual property, user data, and system integrity by (a) adhering to Hypori's policies and procedures for secure software development and (b) following best practices for secure product design, implementation, and deployment of development, build, test, production, and other environments.

Qualifications:

• Must be a US Citizen or US Permanent Resident

• 5+ years of hands-on software engineering experience, with a demonstrated focus on building and securing production systems. Proficient in at least one programming language.

• Proficient in understanding and explaining the ins and outs of software vulnerabilities across stacks, their potential impact when exploited, and how to mitigate them.

• Proficient in the security management of cloud infrastructure services and container-based deployments.

• Proficient in the management of software supply chain security aspects, including the management of software security vulnerabilities in dependencies.

• Proficient in secrets management practices and tooling (e.g., HashiCorp Vault, AWS Secrets Manager), including automated secrets scanning in development workflows and CI/CD pipelines.

• Proficient in expressing the concepts, practical application, and typical implementation of identity & access management, applied cryptography, network security, and related security domains.

• Proficient in API security concepts and their application, authentication and authorization patterns (OAuth 2.0, OIDC), and secure API design principles.

• Proficient in concisely articulating both technical risk and the trade-offs of proposed solutions to decision makers and peers.

• Experience with modern CI/CD pipelines, scrum-based engineering practices, and the automation, integration, and centralized management of security and compliance tooling across development lifecycles.

• Experience in interpreting security and compliance frameworks and standards.

• Experience with application security testing tools and techniques, and with demonstrating/validating the exploitability of vulnerabilities.

• Experience with AI/LLM-assisted tooling to automate application security tasks, and ability to advise software engineers on the security, compliance, and privacy implications of their use.

Preferred Attributes:

• Proficient in the application of infrastructure-as-code principles and associated security paradigms.

• Familiarity with FedRAMP, NIST SP 800-53, or comparable government compliance frameworks.

• Experience working in or supporting a government or defense technology environment.

Pay Range:

• $180,000-$195,000 (commensurate with experience and interview performance) plus a 10% bonus