Staff / Principal Engineer, Product Security

Radar Staff / Principal Engineer, Product SecurityRadar is the global leader in geolocation, with geofencing SDKs, maps APIs, and AI-enabled solutions for marketing, fraud, and operations teams.We're looking for a Staff / Principal Engineer, Product Security to help us build the security foundation of our platform and products. As a geolocation and compliance company, Radar develops mobile & web SDKs and server side APIs for customers to use in their applications for their critical geolocation use cases.The overall application surface area is multi-stack, covering mobile SDKs, web SDKs, web dashboard, server APIs, and the Radar Verify desktop apps for Mac and Windows. As new threat patterns are continually emerging in both the client and server side, this is a key role that contributes to keeping our software and solutions one step ahead.Most of our engineering team are former technical co-founders or former Radar interns from schools like Waterloo and CMU. Most engineers at Radar fit one of two molds, technically: either Staff level expertise in one stack, or "Multi-Stack" at any level. We say "Multi-Stack" because "Full-Stack" has the connotation of "Frontend and Backend", but Radar Engineers might also work on Mobile or Data engineering. Not that you need to be an expert in all of those, but a desire to learn, jump around to different stacks, and get things done is the important part.We care a lot about shipping fast and talking to customers. We're committed to our product vision of full-stack location infrastructure, but we also know that customer feedback is a treasure map to gold. Even though Slack is the brain of our company, working together in-person in our NYC HQ is the fastest way for us to get things done. We meet on Mondays to plan out work for the week in small groups and use Linear for planning.To us, a week is a long time, and we expect to ship big things every week.Mobile SDKs are Objective-C, Swift, Kotlin, React Native, Flutter and more, the frontend is React, the backend is TypeScript and Rust. Everything is deployed to AWS. We sponsor OpenStreetMaps, MapLibre, and OpenAddresses.After a call with our Technical Recruiter, you'll do several technical Zoom calls with members of our engineering team: code screen, technical assessment round, and system design round. If those go well we'll invite you to our NYC HQ for a final round interview. You'll meet one of our co-founders, someone from outside engineering, and meet more people from Radar. We'll go into more depth about how we work to see if there is a match.Set the tone for secure-by-design architecture for the engineering org.Build and influence our security product and platform roadmaps based on your findings, ensuring our systems remain secure in everything we do.Think like an adversary to identify ways to circumvent Radar geolocation & compliance checks throughout the SDLC, including automated penetration tests against Radar mobile & web SDKs, desktop apps and server side APIs.Collaborate and contribute as an engineer and a defender, and work alongside product and platform engineers to ensure that the products Radar builds are inherently secure before they reach customers.Integrate practical and effective security standards throughout Radar's SDLC process, including guidance for AI security best practices.Embody our "Walk a mile" value by walking around to QA and secure the Radar SDKs.Take feedback from Radar customers, prospects, and peers and incorporate it into your work to make them successful.Be a builder who understands automation, application architecture, and application development.Have experience working on mobile penetration testing.Have experience working in regulated industries where motivated threat actors are a reality.Competitive salaryMeaningful stock options in a fast-growing company401(k) plan with 4% matchNew HQ in Flatiron, NYCTop-notch equipmentCatered lunchesUnlimited PTOHealth, dental, and vision insurance with 100% coverage for employees12 weeks of paid parental leaveCommuter and fitness benefitsRadar is an equal opportunity employer and does not discriminate on the basis of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran status, or any other characteristic protected by law.