Senior Software Engineer (Application & Cloud Security)

Join Hypori, a leading company in application and cloud security. As a Senior Software Engineer specializing in Application Security, you will work closely with software engineering teams to improve the security posture of our products and operational SaaS environments. You will integrate security tooling in CI/CD pipelines, develop security patterns, and serve as a subject matter expert for secure development and deployment. Additionally, you will mentor engineers on application security principles, lead automation and integration of vulnerability management tooling, and contribute to technical compliance strategies. Enjoy a range of benefits including performance bonuses, flexible spending accounts, health insurance, and a remote work program.

• Enabling software engineering teams to continuously improve the security posture of products and operational SaaS environments.
• Integrating security tooling in CI/CD pipelines, developing security patterns, and serving as a subject matter expert for secure development and deployment.
• Mentoring engineers on application security principles, secure design patterns, and secure coding practices; growing security capability and awareness.
• Proficient in the management of software supply chain security aspects, including the management of software security vulnerabilities in dependencies
• Proficient in understanding and explaining the ins and outs of software vulnerabilities across stacks, their potential impact when exploited, and how to mitigate them
• Experience with modern CI/CD pipelines, scrum-based engineering practices, and the automation, integration, and centralized management of security and compliance tooling across development lifecycles
• Proficient in concisely articulating both technical risk and the trade-offs of proposed solutions to decision makers and peers
• 5+ years of hands-on software engineering experience, with a demonstrated focus on building and securing production systems. Proficient in at least one programming language
• Proficient in expressing the concepts, practical application, and typical implementation of identity & access management, applied cryptography, network security, and related security domains
• Experience with AI/LLM-assisted tooling to automate application security tasks, and ability to advise software engineers on the security, compliance, and privacy implications of their use
• Proficient in API security concepts and their application, authentication and authorization patterns (OAuth 2.0, OIDC), and secure API design principles
• Proficient in the security management of cloud infrastructure services and container-based deployments
• Proficient in secrets management practices and tooling (e.g., HashiCorp Vault, AWS Secrets Manager), including automated secrets scanning in development workflows and CI/CD pipelines
• Experience with application security testing tools and techniques, and with demonstrating/validating the exploitability of vulnerabilities
• Experience in interpreting security and compliance frameworks and standards
• Proficient in the application of infrastructure-as-code principles and associated security paradigms
• Familiarity with FedRAMP, NIST SP 800-53, or comparable government compliance frameworks
• Experience working in or supporting a government or defense technology environment