Security Software Engineer

About the Role As a Security Software Engineer, you will build foundational security systems that protect our users and infrastructure. You will design and implement robust, scalable security services, acting as a primary partner for engineering teams to build secure-by-design solutions into our platform. You will take ownership of core functions such as authentication (login, MFA), identity management (SCIM, RBAC), secret management, and more. Your work will be crucial in maintaining and hardening compliance (e.g., SOC 2) and protecting sensitive data across our organization. What You'll Do

• Security Service Development: Design and build core security services (e.g., permissions management, secrets orchestration, secure MLOps). Develop secure-by-default libraries and frameworks that empower other engineering teams to write secure code.
• Security Infrastructure Automation: Enhance our CI/CD pipeline with automated self-serve security controls (e.g. SAST, supply chain security controls)
• Architecture & Code Review: Conduct secure code and architecture reviews, enforce secure-by-design principles, and lead threat modeling.
• System Hardening: Build and maintain resilient cloud infrastructure. Implement network isolation, automated vulnerability detection, and defense-in-depth strategies to harden our production environment.
• Compliance & Process: Run security incident response, document risks, and support audits.
• Collaboration & Education: Advise teams on security best practices, identify and solve for developer security friction points, and bring security awareness to engineering. What We're Looking For
• 5+ years of hands-on software engineering experience.
• 3+ years of hands-on security-focused engineering experience.
• Proficient in at least one programming language (Ruby, TypeScript, Python, C++, etc.) and willingness to ramp up in others.
• Experience building scalable security systems (e.g., secret management, service authorization, data encryption) in a production environment.
• Experience with threat modeling, security design reviews, or security incident response.
• Experience integrating security directly into the software development lifecycle (SDLC).
• Meticulous attention to detail; able to be the final checkpoint on security decisions.
• Excellent communication and collaboration skills for cross-team interactions.
• Ability to mentor and train engineers on secure development processes.
• A proactive approach to continuous learning and staying current with emerging security trends. Nice to Have
• Experience with cloud infrastructure and tooling such as Kubernetes, GCP, Terraform, Docker.
• Familiarity with secure-by-design patterns and secure coding practices. Compensation & Benefits
• Salary: USD 165,000 - 239,000 annually.
• Benefits: Comprehensive medical, dental, and vision coverage for you and dependents; Unlimited and flexible paid time off; Paid Family Leave; Mandatory Self-Care Days; Remote Wellbeing Resources (fitness classes, meditation/mindfulness tools, virtual therapy, and family planning assistance); Learning support for continued education including management training, conferences, workshops, or certifications.
• Hybrid work policy: Hover has hubs in San Francisco and New York City; employees living within a 50-mile radius are expected to come into their local Hover office at least three times a week to build rapport. At this time, Hover is not considering fully remote roles.