Senior Security Engineer

Hopper

Senior Security Engineer at Hopper focusing on application security and building automated security tools. Collaborate with engineering teams to influence and improve secure development practices across the organization.

Posted 6/1/2026full-timeRemote • New York • 🇺🇸 United StatesSenior💰 $110,000 - $300,000 per yearWebsite

Tech Stack

Tools & technologies

CloudGoogle Cloud PlatformSDLC

About the role

Key responsibilities & impact

Own and evolve our vulnerability management program with a focus on application security — container images, dependencies, code scanning, and runtime detection
Build and maintain security tooling that integrates directly into CI/CD pipelines and developer workflows, so security happens automatically rather than as a gate
Use AI extensively to write code faster, automate analyses that would otherwise require manual review, and build intelligent tooling that scales beyond what a small team could achieve manually
Assess and improve how we leverage available telemetry across our systems
Work directly with engineering teams to influence secure development practices — not by writing standards and documents, but by shipping tools and defaults that make the secure path the easy path
Investigate and respond to security findings when needed, but spend more of your time building systems that prevent and detect issues than manually chasing them
Adapt quickly as priorities shift — our team is agile and tomorrow's challenge may look different from today's

Requirements

What you’ll need

At least 5 years experience software and/or platform engineering, with the ability to design, build, and maintain production-quality tools
Deep experience in application security and vulnerability management — you understand CVEs, dependency risks, container security, and SDLC integration, and you have opinions about what's worth fixing and what's noise
Hands-on experience with cloud infrastructure, ideally GCP/GKE or equivalent, with the ability to adapt to our stack
A demonstrated habit of using AI tools — coding assistants, LLMs — as a core part of how you build and analyse, not an occasional shortcut
A bias toward automation — when you see a repetitive manual task, your instinct is to write a tool, not a runbook
Comfort with ambiguity and ownership — you'll often be the only person on a problem and will need to make judgment calls on priority, approach, and scope without waiting for direction
Experience influencing engineering culture around security, knowing how to make developers care without slowing them down
Strong written and verbal communication skills, including the ability to articulate our security posture clearly to customers when needed.

Benefits

Comp & perks

Well-funded and proven startup with large ambitions, competitive salary and the upsides of pre-IPO equity packages.
Unlimited PTO.
Carrot Cash travel stipend.
Access to co-working space on demand through FlexDesk AND Work-from-home stipend.
Please ask us about our very generous parental leave, much above industry standards!.
Entrepreneurial culture where pushing limits and taking risks is everyday business.
Open communication with management and company leadership.
Small, dynamic teams = massive impact.
100% employer paid Medical, Dental and Vision coverage for employees.
Access to Disability & Life insurance.
Health Reimbursement Account (HRA).
DCA/ FSA and access to 401k plan.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

application securityvulnerability managementCI/CD pipelinescloud infrastructureGCPGKEAI toolscoding assistantsSDLC integrationautomation

Soft Skills

adaptabilityownershipinfluencecommunicationproblem-solvingjudgmentcollaborationagilityprioritizationanalytical thinking