Audit Data Search, Inc. ยท 23 hours ago
Application Security Engineer - Product
NYC Metro Area
Full-time
Hybrid
Lead/Staff
10+ years expAudit Data Search, Inc. is a Fortune-level consumer technology company seeking a Principal Product Security Engineer to partner with engineering teams to ensure secure design practices for complex applications. This hands-on senior level role involves influencing architecture, implementation, and security strategy while mentoring junior team members.
Hiring Manager
Rachel Stevens
Responsibilities
Lead secure architecture reviews and threat modeling for complex client-side applications
Partner directly with engineers on design decisions, code reviews, and remediation, including guidance on secure implementation
Guide product developers in crafting products to be robust against misuse and abuse - with the lowest friction possible
Drive security for desktop and mobile applications across modern OS environments (Windows, macOS, Linux, iOS, Android)
Advise on OS-level security controls, including sandboxing, privilege separation, IPC, and secure local storage
Embed security into the SDLC through tooling, secure patterns, and developer education
Support vulnerability remediation and incident response in thick client environments
Influence security strategy across a high-impact product area
Oversee, coach and mentor more junior members of the team
Qualification
Required
10+ years of experience in product or application security, with demonstrated ownership at the system or product level
Bachelor's Degree in a related field
Deep, hands-on experience securing thick client / native applications (desktop and/or mobile)
Strong understanding of OS security models, including sandboxing, IPC, local storage protections, and secure use of platform APIs
Proficiency in GenAI security, modern cryptography, certificate management, secure authentication (OAuth, WebAuthn, FIDO2), and secure session handling
Hands-on experience with secure coding practices in at least one systems language (C++, Rust, Go) and one application language (Kotlin, Swift, C#)
Familiarity with static/dynamic analysis tools, fuzzing, penetration testing, and reverse engineering for client applications
Experience embedding security into the SDLC (threat modeling, code reviews, secure design patterns)
Ability to manage incident response and vulnerability remediation for thick client environments
Strong cross-team communication skills and ability to write clear developer-facing security guidelines
Ability to work directly with engineers and provide practical, actionable remediation guidance and clearly communicate ideas and solutions
Preferred
Experience securing large-scale consumer products
Background in systems-level or client-side security research
Company
Audit Data Search, Inc.
Since its inception in 1981, Audit Data Search, Inc.
2-10 employees
Funding
Current Stage
Early StageCompany data provided by crunchbase