Product Security Engineer

Job not on LinkedIn

November 6

Apply Now

Receive Emails with Similar Jobs

Yubico

WebsiteLinkedInAll Job Openings

Security • Cybersecurity

Yubico is a company specializing in secure authentication solutions. It is known for its flagship product, the YubiKey, which provides strong hardware-based protection against phishing and unauthorized access. Yubico's products and services are designed to enhance cybersecurity for enterprises, small and medium-sized businesses, and individuals by offering multi-factor authentication solutions that are both user-friendly and highly secure. Their technology integrates seamlessly with hundreds of applications and services, and they work closely with major tech platforms like Microsoft and Google to provide comprehensive security options. Yubico is committed to promoting cybersecurity across various industries including finance, healthcare, and government, with an emphasis on ease of use and strong protection.

201 - 500 employees

Founded 2007

🔐 Security

🔒 Cybersecurity

📋 Description

• Collaborate with the firmware and software teams to design and integrate solutions that support secure design and development practices. • Employ a combination of static and dynamic analysis methodologies to identify and remedy complex vulnerabilities across our products. • Define and evangelize requirements and guidance for secure by design and secure by default principles. • Implement automation to prevent and detect security flaws in all phases of development. • Conduct design reviews and manual security assessments. • Lead training and awareness sessions. • Define and implement metrics to provide visibility into the impact of your work. • Define, lead, and influence processes to secure products and services. • Identify and advocate for new and novel uses of Yubico’s technology. • Ability to travel to Yubico’s other offices two times per year.

🎯 Requirements

• 3+ years in a product security role • 3+ years of software development • Proficiency in threat modeling • Proficiency in C • Knowledge of common vulnerability classes • Experience in static code analysis • Knowledge of WebAuthn, OATH HOTP, OATH TOTP, U2F, PIV, or OpenPGP (Optional) • Proficiency in .NET or C++ (Optional) • Experience developing for ARM (Optional) • Experience in targeted fuzzing (Optional)

🏖️ Benefits

• Health coverage. We’ve got you covered with top of the line health plans, including dental and vision. We pay 100% of your premium and 85% for your family. • Retirement plan. Our retirement plan includes a 401K dollar per dollar match up to 6% with a cap of $6K/year. Immediate vesting. • Wellness reimbursement. We offer $1,200.00 in wellness earnings (prorated based on start date) that you can use on your gym membership, a massage, or your favorite online fitness classes. This is a taxable benefit if you choose to participate. • Learning and development. We encourage your professional growth and offer a yearly development stipend of $3,000 and mentorship program. • Time off. We offer a total of 15 vacation days plus 10 holidays, and 7 sick days a year. • Paid parental leave. We love welcoming new family members to our YubiTeam! All parents receive 8 weeks of paid leave. Birthing parents receive an additional 8 weeks of paid leave (16 weeks total). • Commuter Benefits. If you need to commute to the office, we offer commuter benefits. • Strong mission & company values. We’re a global team on a global mission to make the internet more secure for everyone. We believe that every person’s work matters. That you should always be nice, stay humble, and have fun, and never take yourself too seriously.