Security Engineer – DevSecOps and Security Architect at PhysicsX

Department: Product

Compensation · Listed in posting

$200,000 – $300,000/yr

Setup: Hybrid
Location: New York, New York
Type: Full-time
Level: staff+
Posted: Feb 5, 2026

Description

PhysicsX is hiring a Principal Security Engineer to partner with engineering teams on secure development practices, CI/CD security tooling, threat modeling, secure design reviews, vulnerability lifecycle management, secure coding standards, and security training. The role requires 10+ years of security experience, hands-on DevSecOps and application security expertise, experience with secure coding, threat modeling, CI/CD, infrastructure as code, containers, and SAST tools, and development experience in Python and Go. The position is hybrid in the New York office and offers a US salary of $200,000 to $300,000 plus equity, pension contributions, health insurance, parental leave, and other benefits.

Required Skills

DevSecOps
Application security
Threat modeling
CI/CD
IaC
Containers
SAST
Python
Go

Additional Information

Required Previous Experiences: 10+ years of security experience focused on DevSecOps and security design reviews
Hands-on experience with secure coding, OWASP Top 10, threat modeling, and SDLC integration
Experience with GitHub/GitLab, CI/CD, IaC, and containerized environments
Experience deploying and working with SAST tooling such as Semgrep and Snyk
Experience developing in Python and Go
Preferred Qualifications: Understanding of AI security fundamentals and the intersection of application and AI security
Experience securing cloud infrastructure
Experience participating in bug bounty programs and managing security disclosures
Familiarity with the BSIMM framework
Experience in cloud security, identity and access management, and cloud-native services
Translation Company Name: PhysicsX