Product Security Engineer

Product Security Engineer

The Product Security team is responsible for ensuring Yubico develops and maintains secure products and services. As part of the Product Security team, your primary responsibility will be to collaborate with the firmware and software teams to design and integrate solutions that support secure design and development practices. You will also employ a combination of static and dynamic analysis methodologies to identify and remedy complex vulnerabilities across our products.

If you are looking for a fun challenge, are passionate about security, and want to work at a security-oriented company, this opportunity is for you.

• Define and evangelize requirements and guidance for secure by design and secure by default principles
• Implement automation to prevent and detect security flaws in all phases of development
• Conduct design reviews and manual security assessments
• Lead training and awareness sessions
• Define and implement metrics to provide visibility into the impact of your work
• Define, lead, and influence processes to secure products and services
• Identify and advocate for new and novel uses of Yubico's technology
• Ability to travel to Yubico's other offices two times per year

• 3+ years in a product security role
• 3+ years of software development
• Proficiency in threat modeling
• Proficiency in C
• Knowledge of common vulnerability classes
• Experience in static code analysis

• Knowledge of Web Authn, OATH HOTP, OATH TOTP, U2F, PIV, or OpenPGP
• Proficiency in .NET or C++
• Experience developing for ARM
• Experience in targeted fuzzing

$120,000 - $140,000 a year

Yubico offers a holistic Total Rewards package designed to support our employees in all aspects of their life inside and outside of work. This role has the annual salary range of $120,000 to $140,000 for a candidate located in the San Francisco Bay Area. For roles that are filled in other locations, the compensation range will be based on data provided by the Radford McLagan Compensation Database from Aon.

Final compensation is also based on a number of factors including, but not limited to, job-related knowledge, skills, and experience.

Our U. S. benefits are designed for your overall well-being:

• Health coverage. We've got you covered with top of the line health plans, including dental and vision. We pay 100% of your premium and 85% for your family.
• Retirement plan. Our retirement plan includes a 401K dollar per dollar match up to 6% with a cap of $6K/year. Immediate vesting.
• Wellness reimbursement. We offer $1,200.00 in wellness earnings (prorated based on start date) that you can use on your gym membership, a massage, or your favorite online fitness classes. This is a taxable benefit if you choose to participate.
• Learning and development. We encourage your professional growth and offer a yearly development stipend of $3,000 and mentorship program.
• Time off. We offer a total of 15 vacation days plus 10 holidays, and 7 sick days a year.
• Paid parental leave. We love welcoming new family members to our Yubi Team! All parents receive 8 weeks of paid leave. Birthing parents receive an additional 8 weeks of paid leave (16 weeks total).
• Commuter Benefits. If you need to commute to the office, we offer commuter benefits.
• Strong mission & company values. We're a global team on a global mission to make the internet more secure for everyone. We believe that every person's work matters. That you should always be nice, stay humble, and have fun, and never take yourself too seriously.

We are an equal opportunity employer, we value diversity and uphold an inclusive environment where all people feel that they are equally respected and valued. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity or expression, age, marital status, religion, national origin, disability, protected Veteran status or any other characteristic protected by law.

We'd love to learn about what you can add to our diverse team.