Staff / Principal Engineer, Product Security

Job description

About Radar Radar https://radar.com is the global leader in geolocation, with geofencing SDKs, maps APIs, and AI-enabled solutions for marketing, fraud, and operations teams. Why is Radar the best place to work? - We're trusted by some of the world's best companies, from high-growth startups to the Fortune 500. - We have incredible scale: We're processing over 1 billion API calls per day from hundreds of millions of devices. - We're well-resourced, and we've raised $85.5M from world-class investors, including Accel and Insight Partners. - We have a high-performance culture, with ambitious and entrepreneurial teammates in every role. - We recently moved into an amazing new office in Flatiron, Manhattan, NYC. - We were recently named a top 10 best place to work in NYC by Crain's. Despite our growth and scale, we're still just getting started. That's where you come in. About the role We're looking for a Staff / Principal Engineer, Product Security to help us build the security foundation of our platform and products. As a geolocation and compliance company, Radar develops mobile & web SDKs and server side APIs for customers to use in their applications for their critical geolocation use cases. For example, our Protect product https://radar.com/solutions/protect enforces precise jurisdictional inclusion / exclusion geofences for regulated gaming use cases and stops fraud from risky devices, users and IP addresses. The overall application surface area is multi-stack, covering mobile SDKs, web SDKs, web dashboard, server APIs, and the Radar Verify desktop apps for Mac and Windows. As new threat patterns are continually emerging in both the client and server side, this is a key role that contributes to keeping our software and solutions one step ahead. How we work: Most of our engineering team are former technical co-founders or former Radar interns from schools like Waterloo and CMU. Most engineers at Radar fit one of two molds, technically: either Staff level expertise in one stack, or "Multi-Stack" at any level. We say "Multi-Stack" because "Full-Stack" has the connotation of "Frontend and Backend", but Radar Engineers might also work on Mobile or Data engineering. Not that you need to be an expert in all of those, but a desire to learn, jump around to different stacks, and get things done is the important part. We care a lot about shipping fast and talking to customers. We're committed to our product vision of full-stack location infrastructure, but we also know that customer feedback is a treasure map to gold. Even though Slack is the brain of our company, working together in-person in our NYC HQ is the fastest way for us to get things done. We meet on Mondays to plan out work for the week in small groups and use Linear for planning. To us, a week is a long time, and we expect to ship big things every week. The stack: Mobile SDKs are Objective-C, Swift, Kotlin, React Native, Flutter and more, the frontend is React, the backend is TypeScript and Rust. Everything is deployed to AWS. We sponsor OpenStreetMaps, MapLibre, and OpenAddresses. The hiring process: After a call with our Technical Recruiter, you'll do several technical Zoom calls with members of our engineering team: code screen, technical assessment round, and system design round. If those go well we'll invite you to our NYC HQ for a final round interview. You'll meet one of our co-founders, someone from outside engineering, and meet more people from Radar. We'll go into more depth about how we work to see if there is a match. What you’ll do: - Set the tone for secure-by-design architecture for the engineering org. - Build and influence our security product and platform roadmaps based on your findings, ensuring our systems remain secure in everything we do. - Think like an adversary to identify ways to circumvent Radar geolocation & compliance checks throughout the SDLC, including automated penetration tests against Radar mobile & web SDKs, desktop apps and server side APIs. - Collaborate and contribute as an engineer and a defender, and work alongside product and platform engineers to ensure that the products Radar builds are inherently secure before they reach customers. - Integrate practical and effective security standards throughout Radar’s SDLC process, including guidance for AI security best practices. - Embody our "Walk a mile" value by walking around to QA and secure the Radar SDKs. - Take feedback from Radar customers, prospects, and peers and incorporate it into your work to make them successful. You should: - Be a builder who understands automation, application architecture, and application development. - Have experience working on mobile penetration testing. - Have experience working in regulated industries where motivated threat actors are a reality. Bonus points if you: - Are a former technical founder - Have experience with compliance testing for regulated gaming apps. You’ll work with: - Tim Julien https://www.linkedin.com/in/timjulien/, CTO - Leo Kim https://www.linkedin.com/in/leokim/, VP Engineering, Platform - Our engineering team What we offer: - Competitive salary - Meaningful stock options in a fast-growing company - 401(k) plan with 4% match - New HQ in Flatiron, NYC - Top-notch equipment - Catered lunches - Unlimited PTO - Health, dental, and vision insurance with 100% coverage for employees - 12 weeks of paid parental leave - Commuter and fitness benefits We’ll share full details of our benefits package at the offer stage. Benefits may vary by location. Radar is an equal opportunity employer and does not discriminate on the basis of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran status, or any other characteristic protected by law.