Define and evangelize requirements and guidance for secure by design and secure by default principles
Implement automation to prevent and detect security flaws in all phases of development
Conduct design reviews and manual security assessments
Lead training and awareness sessions
Define and implement metrics to provide visibility into the impact of your work
Define, lead, and influence processes to secure products and services
Identify and advocate for new and novel uses of Yubico’s technology
Ability to travel to Yubico’s other offices two times per year
Requirements
3+ years in a product security role
3+ years of software development
Proficiency in threat modeling
Proficiency in C
Knowledge of common vulnerability classes
Experience in static code analysis
Knowledge of WebAuthn, OATH HOTP, OATH TOTP, U2F, PIV, or OpenPGP (optional)
Proficiency in .NET or C++ (optional)
Experience developing for ARM (optional)
Experience in targeted fuzzing (optional)
Tech Stack
.NET
Benefits
Health coverage. We’ve got you covered with top of the line health plans, including dental and vision. We pay 100% of your premium and 85% for your family.
Retirement plan. Our retirement plan includes a 401K dollar per dollar match up to 6% with a cap of $6K/year. Immediate vesting.
Wellness reimbursement. We offer $1,200.00 in wellness earnings (prorated based on start date) that you can use on your gym membership, a massage, or your favorite online fitness classes. This is a taxable benefit if you choose to participate.
Learning and development. We encourage your professional growth and offer a yearly development stipend of $3,000 and mentorship program.
Time off. We offer a total of 15 vacation days plus 10 holidays, and 7 sick days a year.
Paid parental leave. We love welcoming new family members to our YubiTeam! All parents receive 8 weeks of paid leave. Birthing parents receive an additional 8 weeks of paid leave (16 weeks total).
Commuter Benefits. If you need to commute to the office, we offer commuter benefits.