Product Security Engineer

Yipit Data is the leading market research and analytics firm for the disruptive economy and most recently raised $475M from The Carlyle Group at a valuation of over $1B. Every day, our proprietary technology analyzes billions of alternative data points to uncover actionable insights across sectors like software, AI, cloud, e-commerce, ride sharing, and payments.

Our data and research teams transform raw data into strategic intelligence, delivering accurate, timely, and deeply contextualized analysis that our customers—ranging from the world’s top investment funds to Fortune 500 companies—depend on to drive high-stakes decisions. From sourcing and licensing novel datasets to rigorous analysis and expert narrative framing, our teams ensure clients get not just data, but clarity and confidence.

We operate globally with offices in the US, APAC, and India. Our award-winning, people-centric culture—recognized by Inc. as a Best Workplace for three consecutive years—emphasizes transparency, ownership, and continuous mastery.

Yipit Data isn’t a place for coasting—it’s a launchpad for ambitious, impact-driven professionals.

From day one, you’ll take the lead on meaningful work, accelerate your growth, and gain exposure that shapes careers.

• Ownership That Matters :
  You’ll lead high-impact projects with real business outcomes
• Rapid Growth :
  We compress years of learning into months
• Merit Over Titles :
  Trust and responsibility are earned through execution, not tenure
• Velocity with Purpose :
  We move fast, support each other, and aim high—always with purpose and intention

If your ambition is matched by your work ethic—and you’re hungry for a place where growth, impact, and ownership are the norm—Yipit Data might be the opportunity you’ve been waiting for.

Yipit Data is looking for a Product Security Engineer to help build security into the products and services we deliver to customers.

In this role, you will partner closely with Engineering and Product teams throughout the development lifecycle. You will assess new products and technologies, lead threat modeling and security design reviews, identify vulnerabilities, and help teams implement practical fixes before issues reach production.

This is a hands‑on role for someone who understands how modern applications are designed and built. You should be comfortable reviewing system architecture, analyzing vulnerabilities, working directly with engineers, and improving the security tools embedded in our development pipelines.

This is a remote-friendly opportunity that can sit in NYC (where our headquarters is located), one of our office hubs, or anywhere else in the US. However, depending upon where the remote work is performed, income could be subject to New York State tax withholding.

The work hours are flexible on this team, but most employees work East Coast hours.

• Get involved early in new products and features, using threat modeling and security design reviews to find problems before they reach production
• Dig into application architecture, APIs, authentication, authorization, data flows, cloud services, and third‑party integrations to understand how systems could be attacked
• Find and validate vulnerabilities, separate real risk from noise, and help teams prioritize what actually matters
• Work alongside engineers to design remediate plans that protect customers without bringing development to a halt
• Own and improve security tooling across the development lifecycle, including SAST, DAST, dependency scanning, and secret scanning
• Tune security tools and workflows so engineers receive useful findings instead of a flood of false…