About the company
Our client is a fast-growing software company.
The role
Raydar is recruiting for this role on behalf of our client. Own the security of application code and software features, from secure development standards and code review through threat modeling, security tooling and protection of sensitive data. Work closely with engineers to build protections in from the start and to define safe design patterns for automated software components.
What you'll do
- Set secure development standards for authentication, authorization, secrets handling and input validation that engineers can adopt easily.
- Embed security checks in code review, build pipelines and pre-release testing to catch risks before release.
- Run threat modeling on feature work and turn findings into practical controls.
- Build security tooling and automated scans that extend coverage across the codebase, using AI to speed up review.
- Define secure patterns for software that calls third-party services and automated components, including credential storage, response validation and permission limits.
- Create reusable guidelines, checklists and code-level guardrails for development teams.
- Produce security reviews and documentation to support product releases.
- Establish and apply rules for guarding sensitive information inside software, covering who can view it, what gets screened on the way out and how activity is recorded for later review.
Requirements
What we're looking for
- Experience in application or product security on production systems at scale.
- Working proficiency in Python, Go or TypeScript for tooling and automation.
- Strong grounding in application security fundamentals, including common web vulnerability classes, authentication and authorization, secure development lifecycle, secrets management, secure integrations and basic cryptography.
- Understanding of the security risks in automated software that takes actions and calls tools, including design, permission scoping and risk review.
Bonus points
- Computer science degree, or equivalent experience.
- Familiarity with compliance frameworks such as FedRAMP, HIPAA, SOC 2 or ISO 27001.
Benefits
Compensation and benefits
- Base salary: $220K - $300K
- Equity
- Health, dental and vision coverage
- Paid parental leave
- Retirement plan
- Flexible time off
- Commuter benefits
Location and work model
- San Francisco, California, United States
- Hybrid with 3 days in-office, or remote in US/UK
- Full-time
Skills Required
- Experience in application or product security on production systems at scale
- Working proficiency in Python, Go, or TypeScript for tooling and automation
- Strong knowledge of application security fundamentals, including web vulnerabilities, authentication, authorization, secure development lifecycle, secrets management, secure integrations, and basic cryptography
- Understanding of security risks in automated software that takes actions and calls tools, including design, permission scoping, and risk review
- Computer science degree or equivalent experience
- Familiarity with FedRAMP, HIPAA, SOC 2, or ISO 27001 compliance frameworks
What We Do
Raydar is a talent acquisition and business consulting firm that connects world-class and emerging talent with growing organizations. It supports companies through team development, strategic hiring, and customized growth solutions, helping clients recruit roles such as engineers, product managers, executives, legal counsel, and quantitative traders. Raydar focuses on understanding each organization’s needs, culture, and long-term goals to build high-impact teams.
