Staff / Principal Engineer, Product Security
Radar is the global leader in geolocation, with geofencing SDKs, maps APIs, and AI-enabled solutions for marketing, fraud, and operations teams. Why is Radar the best place to work? We're trusted by some of the world's best companies, from high-growth startups to the Fortune 500. We have incredible scale: We're processing over 1 billion API calls per day from hundreds of millions of devices. We're well-resourced, and we've raised $85.5M from world-class investors, including Accel and Insight Partners. We have a high-performance culture, with ambitious and entrepreneurial teammates in every role. We recently moved into an amazing new office in Flatiron, Manhattan, NYC. We were recently named a top 10 best place to work in NYC by Crain's. Despite our growth and scale, we're still just getting started. That's where you come in.
About the role
We're looking for a Staff / Principal Engineer, Product Security to help us build the security foundation of our platform and products. As a geolocation and compliance company, Radar develops mobile & web SDKs and server side APIs for customers to use in their applications for their critical geolocation use cases. For example, our Protect product enforces precise jurisdictional inclusion / exclusion geofences for regulated gaming use cases and stops fraud from risky devices, users and IP addresses. The overall application surface area is multi-stack, covering mobile SDKs, web SDKs, web dashboard, server APIs, and the Radar Verify desktop apps for Mac and Windows. As new threat patterns are continually emerging in both the client and server side, this is a key role that contributes to keeping our software and solutions one step ahead.
Responsibilities
- Set the tone for secure-by-design architecture for the engineering org.
- Build and influence our security product and platform roadmaps based on your findings, ensuring our systems remain secure in everything we do.
- Think like an adversary to identify ways to circumvent Radar geolocation & compliance checks throughout the SDLC, including automated penetration tests against Radar mobile & web SDKs, desktop apps and server side APIs.