Product Security Engineer

Builds security into YipitData's customer-facing products as a hands-on product security engineer working with Engineering and Product. The engineer joins projects early to run threat modelling and design reviews, examines architecture, APIs, authentication, data flows and integrations for weaknesses, validates vulnerabilities and helps teams fix what matters, owns and tunes SAST, DAST, dependency and secret scanning, automates security work, writes standards and secure patterns, and helps lead the response to product security issues, including emerging risks in AI-enabled products. YipitData wants a background in product or application security, software engineering or penetration testing, real threat-modelling skill, comfort with cloud, containers and CI/CD, and coding in Python or JavaScript. Remote anywhere in the US; most of the team keeps East Coast hours.