About this role
Developing core security services like permissions management, secrets orchestration, and secure MLOps forms the foundation of daily engineering tasks at Hover. Team members collaborate closely with senior engineers on essential functions including authentication, identity management, and secret management, while integrating robust security solutions into the platform.
The Infrastructure and Security team ensures platform scalability, reliability, and security to empower engineers in building and deploying applications safely. This role exists to protect users and infrastructure by establishing secure-by-design principles, automating vulnerability detection, and hardening cloud environments.
Candidates who succeed here bring strong technical fundamentals, product thinking, and a collaborative mindset, paired with an eagerness to grow quickly through mentorship.
What you will do
- Collaborate on developing core security services like permissions management, secrets orchestration, and secure MLOps.
- Help build secure-by-default libraries and frameworks that empower engineering teams to write secure code.
- Assist with enhancing the CI/CD pipeline by integrating automated self-serve security controls such as SAST and supply chain security checks.
- Support secure code and architecture reviews while learning to lead threat modeling under mentorship.
- Contribute to maintaining resilient cloud infrastructure, network isolation, automated vulnerability detection, and defense-in-depth strategies.
- Contribute to security incident response, document security risks, and support compliance audits like SOC 2.
- Advise teams on security best practices, resolve developer security friction points, and bring security awareness to engineering.
What you need
- Bring 1-2+ years of hands-on software engineering experience or equivalent practical experience.
- Hold a Bachelor’s degree in Computer Science or a related field, or demonstrate strong technical fundamentals with an interest in security.
- Possess strong programming fundamentals in debugging and writing maintainable code with proficiency in at least one modern language.
- Demonstrate basic familiarity with web security concepts, modern development practices, and integrating security into the SDLC.
- Exhibit strong attention to detail, clear communication, and an eagerness to ask clarifying questions and surface blockers early.
- Maintain excellent communication and collaboration skills for cross-team interactions.
Nice to have
- Experience from internships or collaborative coding projects in a university or professional setting
- Familiarity with security tools such as SAST scanners, vulnerability detectors, or LLM-assisted coding tools
- Demonstrated curiosity in security through CTF competitions, open-source contributions, or personal projects
Benefits
- Comprehensive medical, dental, and vision coverage for you and dependents
- Unlimited and flexible vacation policy
- Generous paid parental and new child bonding leave
- Mandatory Self-Care Days to allow employees to recharge each month
- Recurring fitness classes, meditation and mindfulness tools, virtual therapy, and family planning assistance
- Continued education coverage for management training, conferences, workshops, or certifications
Skills and tech stack
Questions candidates ask
What is the remote work policy?
Hover has hubs in San Francisco and New York City. Employees living within a 50-mile radius of the offices are expected to come in at least three times a week, and fully remote roles are not currently considered.
What is the salary range for this position?
The US base salary range for this full-time position is $148,000 to $183,000 annually. Individual pay is determined by work location, job-related skills, experience, and relevant education or training.
What does the Infrastructure and Security team handle?
The team handles everything from Kubernetes environments and cloud architecture to securing user authentication and automating vulnerability detection. Their mission is to make the best path the easiest path through robust automation and secure-by-design principles.