1 day ago
Base Salary
$200k - $300k/yr
Responsibilities
- Architect and integrate security tooling into CI/CD pipelines to automate vulnerability detection and prevention.
- Lead threat modeling and secure design reviews for web applications, APIs, and cloud services.
- Oversee vulnerability triage, prioritization, remediation support, and risk communication.
- Develop secure coding standards and playbooks, and provide security training and mentorship.
- Scale secure development practices by collaborating with engineering teams throughout the software lifecycle.
- Engage with customers during security reviews.
Requirements
- 10+ years of security experience focused on DevSecOps and security design reviews.
- Hands-on experience with secure coding, OWASP Top 10, threat modeling, and SDLC integration.
- Experience with GitHub or GitLab, CI/CD, infrastructure as code, and containerized environments.
- Experience deploying and working with SAST tools such as Semgrep and Snyk.
- Experience developing in Python and Go.
- Ability to balance pragmatism with security rigor in a fast-paced environment and communicate effectively.
- Preferred: AI security fundamentals, cloud infrastructure security, bug bounty and security disclosure management, BSIMM, identity and access management, and cloud-native services.
Benefits
- Hybrid work model combining time in the New York office with work-from-home days.
- UK benefits include equity options, 10% employer pension contribution, 25 days of holiday plus public holidays, private health insurance, enhanced parental leave, and free onsite lunch.
- US benefits include equity options, a 5% 401(k) contribution, weekly free team lunch, private health insurance, enhanced parental leave, 20 days of annual leave plus public holidays, personal development support, subsidized Gympass/Wellhub, and an FSA.
About PhysicsX
PhysicsX builds an AI-driven simulation software stack that enables high-fidelity, multi-physics modeling and optimization for engineering and manufacturing teams. The company sells software and delivery services to enterprises in aerospace and defense, automotive, semiconductors, materials, and energy. It is privately held and headquartered in London, with offices in London and New York.