{"id":126541,"url":"https://alion.io/job/yipitdata-product-security-engineer","title":"Product Security Engineer","company":{"id":1580,"name":"YipitData","domain":"yipitdata.com","url":"https://alion.io/company/yipitdata","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":87,"open_postings":40,"ghost_share":0,"stale_share":0.525,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":180000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"JavaScript","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-26T15:59:38Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-20T22:40:29Z","board_verified":true,"closed_at":null,"days_open":55,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":54},"description":"About Us:\nYipitData is the leading market research and analytics firm for the disruptive economy and most recently raised $475M from The Carlyle Group at a valuation of over $1B. Every day, our proprietary technology analyzes billions of alternative data points to uncover actionable insights across sectors like software, AI, cloud, e-commerce, ridesharing, and payments.\nOur data and research teams transform raw data into strategic intelligence, delivering accurate, timely, and deeply contextualized analysis that our customers-ranging from the world’s top investment funds to Fortune 500 companies-depend on to drive high-stakes decisions. From sourcing and licensing novel datasets to rigorous analysis and expert narrative framing, our teams ensure clients get not just data, but clarity and confidence.\nWe operate globally with offices in the US, APAC, and India. Our award-winning, people-centric culture-recognized by Inc. as a Best Workplace for three consecutive years-emphasizes transparency, ownership, and continuous mastery.\nWhat It’s Like to Work at YipitData:\nYipitData isn’t a place for coasting-it’s a launchpad for ambitious, impact-driven professionals.\nFrom day one, you’ll take the lead on meaningful work, accelerate your growth, and gain exposure that shapes careers.\nWhy Top Talent Chooses YipitData:\nOwnership That Matters: You’ll lead high-impact projects with real business outcomes\nRapid Growth: We compress years of learning into months\nMerit Over Titles: Trust and responsibility are earned through execution, not tenure\nVelocity with Purpose: We move fast, support each other, and aim high-always with purpose and intention\nIf your ambition is matched by your work ethic-and you're hungry for a place where growth, impact, and ownership are the norm-YipitData might be the opportunity you’ve been waiting for.\nAbout The Role:\nYipitData is looking for a Product Security Engineer to help build security into the products and services we deliver to customers.\nIn this role, you will partner closely with Engineering and Product teams throughout the development lifecycle. You will assess new products and technologies, lead threat modeling and security design reviews, identify vulnerabilities, and help teams implement practical fixes before issues reach production.\nThis is a hands-on role for someone who understands how modern applications are designed and built. You should be comfortable reviewing system architecture, analyzing vulnerabilities, working directly with engineers, and improving the security tools embedded in our development pipelines.\nThis is a remote-friendly opportunity that can sit in NYC (where our headquarters is located), one of our office hubs, or anywhere else in the US. However, depending upon where the remote work is performed, income could be subject to New York State tax withholding. \nThe work hours are flexible on this team, but most employees work East Coast hours.\nAs Our Product Security Engineer, You Will:\nGet involved early in new products and features, using threat modeling and security design reviews to find problems before they reach production\nDig into application architecture, APIs, authentication, authorization, data flows, cloud services, and third-party integrations to understand how systems could be attacked\nFind and validate vulnerabilities, separate real risk from noise, and help teams prioritize what actually matters\nWork alongside engineers to design remediate plans that protect customers without bringing development to a halt\nOwn and improve security tooling across the development lifecycle, including SAST, DAST, dependency scanning, and secret scanning\nTune security tools and workflows so engineers receive useful findings instead of a flood of false positives\nBuild automation that allows Product Security to keep pace as our products, engineering teams, and use of AI continue to grow\nTurn security lessons into clear standards, secure design patterns, coding guidance, and documentation engineers will actually use\nHelp lead the response when product security issues arise, from initial investigation and containment through root cause analysis and long-term remediation\nBecome a trusted partner to Engineering and Product by bringing strong security judgment and workable solutions to difficult decisions\nExplore emerging risks across cloud and AI-enabled products and help YipitData prepare for attack techniques that do not yet have a standard playbook\nYou Are Likely To Succeed If:\nYou have worked in product security, application security, software engineering, penetration testing, or another role that taught you how applications are built and broken\nYou can look at a complex system, follow the data, identify trust boundaries, and quickly understand where the real risks may be hiding\nYou know how to threat model, review architecture, and assess applications without relying entirely on a checklist\nYou can validate a vulnerability, determine whether it is actually exploitable, and explain why it matters to both engineers and business leaders\nYou are comfortable working across APIs, cloud services, containers, serverless technologies, and CI/CD pipelines\nYou have worked with tools such as SAST, DAST, dependency scanning, secret scanning, or infrastructure-as-code scanning, and know that getting useful results takes more than simply turning them on\nYou can read and write code and are excited to automate repetitive security work using Python, JavaScript, or a similar language\nYou bring strong judgment and can balance security, customer impact, engineering effort, and business priorities\nYou communicate clearly, ask thoughtful questions, and can build credibility with both technical and non-technical teams\nYou have secured AI-enabled products, agents, large language model applications, or MCP integrations and are excited by risks that do not yet have a perfect playbook\nYou have deep experience with identity, authentication, authorization, or multi-tenant application security\nYou have applied frameworks such as the OWASP Top 10, OWASP MCP Top 10, OWASP ASVS, or NIST in real-world environments\nYou enjoy working across multiple products and engineering teams in an environment where priorities move quickly and no two days look exactly the same\nWhat We Offer:\nOur compensation package includes comprehensive benefits, perks, and a competitive salary: \nWe care about your personal life, and we mean it. We offer flexible work hours, flexible vacation, a generous 401K match, parental leave, team events, wellness budget, learning reimbursement, and more!\nYour growth at YipitData is determined by the impact that you are making, not by tenure, unnecessary facetime, or office politics. Everyone at YipitData is empowered to learn, self-improve, and master their skills in an environment focused on ownership, respect, and trust. See more on our high-impact, high-opportunity work environment above!\nThe annual base salary range for this position is anticipated to be $180,000 / year. Final compensation may be determined by a number of factors, including, but not limited to, the applicant’s experience, knowledge, skills, abilities, and internal team benchmarks.\nThis role may be performed fully remotely within the United States. Please note that our US headquarters are located in NYC. If the remote work is performed outside of these offices, income may be subject to New York State tax withholding.\nWe are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity employer.\nJob Applicant Privacy Notice","description_format":"text","description_chars":7748,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Flexible schedule","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Providers & Datasets","Market Research","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-08-26T15:59:38Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 15 · green card filings: 8","filings_12m":15,"filings_prev_12m":17,"green_card_filings_12m":8,"median_offered_wage_usd":111848,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.532,"p_room":0.45,"age_days":54,"expected_fill_days":34,"reasons":["conf:0","stale_co","velocity","win:tail"],"computed_at":"2026-10-20T05:45:00Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/yipitdata-product-security-engineer","json_url":"https://alion.io/job/yipitdata-product-security-engineer.json","meta":{"generated_at":"2026-10-21T00:29:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":740,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1580},"rest":"https://alion.io/mcp/rest/get_company?id=1580"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fyipitdata-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fyipitdata-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fyipitdata-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/yipitdata-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fyipitdata-product-security-engineer"}]}