Senior Product Security Engineer

Hyperscience is a leader in intelligent document processing solutions, providing an AI platform that automates the processing of documents. The Senior Product Security Engineer will play a crucial role in safeguarding the company's machine-learning-powered platform by implementing security strategies, conducting design reviews, and managing vulnerabilities.

Responsibilities:

• Product Security Strategy: Implement and mature a software assurance model that embeds security into the earliest stages of our development lifecycle
• Security Design Reviews: Analyze new features and product releases, performing threat modeling and providing actionable guidance to engineering teams
• Vulnerability Management: Triage external security inquiries, perform manual code reviews to identify flaws, and advise developers on effective remediation techniques
• Automated Defenses: Design and deploy automated controls using open-source tools to detect, alert, and respond to common attacks against our cloud platform
• Security Knowledge Share: Facilitate internal training and workshops on security best practices, raising awareness and fostering a security-first culture across the organization

Requirements:

• Programming Proficiency: Demonstrate strong, hands-on coding ability in Python and shell scripting to build security automation and tooling
• Software Security Experience: Bring 6+ years of Application Security experience, partnering with developers in a SaaS environment to build and scale a software assurance program
• Offensive Security Skills: Show a practical ability to manually identify and exploit common security flaws in web applications and RESTful APIs
• Cloud & Container Expertise: Possess hands-on experience deploying and hardening containerized environments using Docker and Kubernetes
• Systematic Problem-Solving: Apply a structured approach to solving complex technical problems, coupled with strong communication skills and a deep sense of ownership
• AI Fluency: Utilize modern AI tools and techniques to optimize security workflows, from code analysis to threat detection
• ML/AI Product Experience: Have prior experience securing products that are heavily reliant on machine learning or artificial intelligence components
• Cloud Security Tooling: Demonstrate experience deploying and managing open-source security tools to monitor cloud infrastructure (e.g., AWS, GCP, Azure)
• Secure Architecture Design: Show experience designing secure microservice architectures and distributed systems